]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
MFC r333084:
authorkp <kp@FreeBSD.org>
Wed, 2 May 2018 20:15:02 +0000 (20:15 +0000)
committerkp <kp@FreeBSD.org>
Wed, 2 May 2018 20:15:02 +0000 (20:15 +0000)
commit5d54530ddf13333a3c75ad16b7adb587009e9ac9
treef9761d810a94341463533806f5b9a2d0045f30bf
parent6b1ae0a003064bb417b4c00be3981a1c6425f1ac
MFC r333084:

pfctl: Don't break connections on skipped interfaces on reload

On reload we used to first flush everything, including the list of skipped
interfaces.  This can lead to termination of these connections if they send
packets before the new configuration is applied.

Note that this doesn't currently happen on 12 or 11, because of special EACCES
handling introduced in r315514. This special behaviour in tcp_output() may
change, hence the fix in pfctl.

PR: 214613
Submitted by: Andreas Longwitz <longwitz at incore.de>
sbin/pfctl/pfctl.c