]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
pf: Support killing 'matching' states
authorKristof Provost <kp@FreeBSD.org>
Mon, 3 May 2021 13:35:50 +0000 (15:35 +0200)
committerKristof Provost <kp@FreeBSD.org>
Fri, 14 May 2021 08:48:30 +0000 (10:48 +0200)
commit21449c5c1eee253dc5ce5a70632edba525f803e7
tree294e51267efcd952302406f4f48d653b50a19a31
parent468e68a9172e997739db9bf554a14cb04a2bde72
pf: Support killing 'matching' states

Optionally also kill states that match (i.e. are the NATed state or
opposite direction state entry for) the state we're killing.

See also https://redmine.pfsense.org/issues/8555

Submitted by: Steven Brown
Reviewed by: bcr (man page)
Obtained from: https://github.com/pfsense/FreeBSD-src/pull/11/
MFC after: 1 week
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D30092

(cherry picked from commit 93abcf17e6cf3c1cd8511c8ff7a8bf20b2d76367)
lib/libpfctl/libpfctl.c
lib/libpfctl/libpfctl.h
sbin/pfctl/pfctl.8
sbin/pfctl/pfctl.c
sbin/pfctl/pfctl_parser.h
sys/net/pfvar.h
sys/netpfil/pf/pf_ioctl.c