]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
pf: Support killing 'matching' states
authorKristof Provost <kp@FreeBSD.org>
Mon, 3 May 2021 13:35:50 +0000 (15:35 +0200)
committerKristof Provost <kp@FreeBSD.org>
Fri, 14 May 2021 08:42:07 +0000 (10:42 +0200)
commit8c610ccac621208022c5637ba2e2cc89790447f6
tree14359e6b9ddcb07b67f28979c66815c843734844
parentc505bdcc4e8856975920b67f8e070f944331c921
pf: Support killing 'matching' states

Optionally also kill states that match (i.e. are the NATed state or
opposite direction state entry for) the state we're killing.

See also https://redmine.pfsense.org/issues/8555

Submitted by: Steven Brown
Reviewed by: bcr (man page)
Obtained from: https://github.com/pfsense/FreeBSD-src/pull/11/
MFC after: 1 week
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D30092

(cherry picked from commit 93abcf17e6cf3c1cd8511c8ff7a8bf20b2d76367)
lib/libpfctl/libpfctl.c
lib/libpfctl/libpfctl.h
sbin/pfctl/pfctl.8
sbin/pfctl/pfctl.c
sbin/pfctl/pfctl_parser.h
sys/net/pfvar.h
sys/netpfil/pf/pf_ioctl.c