]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
pf: Support killing floating states by interface
authorKristof Provost <kp@FreeBSD.org>
Thu, 13 May 2021 07:51:28 +0000 (09:51 +0200)
committerKristof Provost <kp@FreeBSD.org>
Thu, 27 May 2021 07:08:29 +0000 (09:08 +0200)
commitf9baaca0f847698b27f86a527438eaf18b9cb92b
treeaea2615b8b746ae2130b79ac61e1bd98cc9e62e3
parent48d771e579d5e651acbe47fb57c360939197d42f
pf: Support killing floating states by interface

Floating states get assigned to interface 'all' (V_pfi_all), so when we
try to flush all states for an interface states originally created
through this interface are not flushed. Only if-bound states can be
flushed in this way.

Given that we track the original interface we can check if the state's
interface is 'all', and if so compare to the orig_if instead.

MFC after: 1 week
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D30246

(cherry picked from commit b62489cc92edbec318fb6c57cdc02b5e3cfa3a67)
sys/netpfil/pf/pf_ioctl.c