As the divert-to pf state is not connected, it is not linked to the
authorbluhm <bluhm@openbsd.org>
Tue, 26 Dec 2017 17:03:46 +0000 (17:03 +0000)
committerbluhm <bluhm@openbsd.org>
Tue, 26 Dec 2017 17:03:46 +0000 (17:03 +0000)
commit2316dd1b6d4ba40ac289164bf692b9ede69cbef7
tree90860407fbcf4f689d7e5ed58390a2f2a83d7104
parentb20990ff4c5ddd9e43d5f1c3e43f31548afdaf95
As the divert-to pf state is not connected, it is not linked to the
incpb and so not removed when the socket is closed.  Packets matching
reply and reply-to states are linked to the sockets immediately.
So these states must go away when the socket is closed.  Check this
with the output of "pfctl -s states" after running the Perl scripts.
regress/sys/net/pf_divert/Makefile