When pf(4) forwards incoming packets with route-to or reply-to,
authorbluhm <bluhm@openbsd.org>
Mon, 15 Jan 2018 12:25:03 +0000 (12:25 +0000)
committerbluhm <bluhm@openbsd.org>
Mon, 15 Jan 2018 12:25:03 +0000 (12:25 +0000)
commit18421856bb663f6ab719afb5bcf84dd776366a13
treea66cf1adad2cde8e7bb1b02ed0b5ee1566bbc38c
parentafd7a2e156d2ba7189e2248402308c559b9e4d7b
When pf(4) forwards incoming packets with route-to or reply-to,
decrement the time-to-live or hop-limit field to prevent routing
loops.  Sending an ICMP time exceeded error makes traceroute work.
For outgoing packets ip_forward() has already done this.
OK visa@ sashan@
sys/net/pf.c