If pf route-to is used for locally generated packets, they may have
authorbluhm <bluhm@openbsd.org>
Tue, 16 Jan 2018 14:48:38 +0000 (14:48 +0000)
committerbluhm <bluhm@openbsd.org>
Tue, 16 Jan 2018 14:48:38 +0000 (14:48 +0000)
commit9f7515428f91819715809dd47b60a3550a42df77
tree88345dbf515c253abb2c3679f52b01a6c61fa315
parentbeb8b0dd5985e55a615b52e593da6e75bab33f3f
If pf route-to is used for locally generated packets, they may have
an invalid source address.  As pf route-to happens after IP source
selection based on a different route, the address should be corrected
after pf has allocated the new route.  Especially loopback addresses
must not appear at outgoing packets.
OK sashan@ visa@
sys/net/pf.c