svn commit: r239644 - projects/pf/head/sys/contrib/pf/net

[Gleb Smirnoff]

Author: glebius
Date: Fri Aug 24 09:28:22 2012
New Revision: 239644
URL: http://svn.freebsd.org/changeset/base/239644

Log:
  Bringing pfsync0 down should really disable pfsync_input().

Modified:
  projects/pf/head/sys/contrib/pf/net/if_pfsync.c

Modified: projects/pf/head/sys/contrib/pf/net/if_pfsync.c
==============================================================================
--- projects/pf/head/sys/contrib/pf/net/if_pfsync.c	Fri Aug 24 07:35:18 2012	(r239643)
+++ projects/pf/head/sys/contrib/pf/net/if_pfsync.c	Fri Aug 24 09:28:22 2012	(r239644)
@@ -594,8 +594,9 @@ pfsync_input(struct mbuf *m, __unused in
 
 	V_pfsyncstats.pfsyncs_ipackets++;
 
-	/* verify that we have a sync interface configured */
-	if (!sc || !sc->sc_sync_if || !V_pf_status.running)
+	/* Verify that we have a sync interface configured. */
+	if (!sc || !sc->sc_sync_if || !V_pf_status.running ||
+	    (sc->sc_ifp->if_drv_flags & IFF_DRV_RUNNING) == 0)
 		goto done;
 
 	/* verify that the packet came in on the right interface */