The function pf_get_sport() did work for out rules only. Make it
authorbluhm <bluhm@openbsd.org>
Fri, 24 Jun 2016 13:55:57 +0000 (13:55 +0000)
committerbluhm <bluhm@openbsd.org>
Fri, 24 Jun 2016 13:55:57 +0000 (13:55 +0000)
commit4af3c109dbc5ac062f35413421ffda1f8c61514e
tree644a2b0db8c5add4055a496630fb3d10dbcb3304
parent7d6f6caed0211461f6635057e57a853d1249e1ba
The function pf_get_sport() did work for out rules only.  Make it
aware of the direction of the packet.  Now nat-to can be used by
in rules and together with divert-to.  Collisions with existing
states are found and produce a "NAT proxy port allocation failed"
message.
OK henning@ mikeb@
sys/net/pf_lb.c