When divert-reply is used, keep some pf states after pcb is dropped if
authoryasuoka <yasuoka@openbsd.org>
Sat, 3 Sep 2022 14:57:54 +0000 (14:57 +0000)
committeryasuoka <yasuoka@openbsd.org>
Sat, 3 Sep 2022 14:57:54 +0000 (14:57 +0000)
commit14b185b35597645fd8f1e1ddde5b752876bd7a14
treea9af810f82738fe11f8148c78c3bf8f85e202afa
parent527da30c3998559531ddeefa6f34d3cd01c94a6c
When divert-reply is used, keep some pf states after pcb is dropped if
its local address is translated, to prevent its source port from being
reused.  regress test by blumn.

ok blumn
sys/net/pf.c
sys/net/pfvar.h