]> CyberLeo.Net >> Repos - FreeBSD/stable/10.git/commit
MFC 330105:
authorkp <kp@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Wed, 21 Mar 2018 09:57:29 +0000 (09:57 +0000)
committerkp <kp@ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f>
Wed, 21 Mar 2018 09:57:29 +0000 (09:57 +0000)
commit8198f0ae1222fbe1d4499a4e0c46d1e34dc1956e
treea9568db5705cf9f7192e791198776cc5e97b27d6
parent6c258afbdf7b62bca36c2133e5a9c25ab185583e
MFC 330105:

pf: Do not flush on reload

pfctl only takes the last '-F' argument into account, so this never did what
was intended.

Moreover, there is no reason to flush rules before reloading, because pf keeps
track of the rule which created a given state. That means that existing
connections will keep being processed according to the rule which originally
created them. Simply reloading the (new) rules suffices. The new rules will
apply to new connections.

PR: 127814
Submitted by: Andreas Longwitz <longwitz at incore.de>

git-svn-id: svn://svn.freebsd.org/base/stable/10@331289 ccf9f872-aa2e-dd11-9fc8-001c23d0bc1f
etc/rc.d/pf