svn commit: r312004 - stable/11/sbin/pfctl

[Luiz Otavio O Souza]

Author: loos
Date: Fri Jan 13 03:05:44 2017
New Revision: 312004
URL: https://svnweb.freebsd.org/changeset/base/312004

Log:
  MFC r310707:
  
  Fix the parsing of NPt binat rules.
  In this specific case the src address can be set to any, which was not
  accepted prior to this commit.
  
  pfSense bug report:	https://redmine.pfsense.org/issues/6985
  Reviewed by:	kp
  Obtained from:	pfSense
  Sponsored by:	Rubicon Communications, LLC (Netgate)

Modified:
  stable/11/sbin/pfctl/parse.y
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/sbin/pfctl/parse.y
==============================================================================
--- stable/11/sbin/pfctl/parse.y	Fri Jan 13 02:12:58 2017	(r312003)
+++ stable/11/sbin/pfctl/parse.y	Fri Jan 13 03:05:44 2017	(r312004)
@@ -4191,7 +4191,7 @@ natrule		: nataction interface af proto 
 		}
 		;
 
-binatrule	: no BINAT natpasslog interface af proto FROM host toipspec tag
+binatrule	: no BINAT natpasslog interface af proto FROM ipspec toipspec tag
 		    tagged rtable redirection
 		{
 			struct pf_rule		binat;