From: henning <henning@openbsd.org>
Date: Tue, 26 Aug 2008 12:19:01 +0000 (+0000)
Subject: we need to call pf_pkt_addr_changed here too. found by david
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=052ea9d279872ebed2f5ec914de7a4d0c9af6bd0;p=openbsd

we need to call pf_pkt_addr_changed here too. found by david
---

diff --git a/sys/netinet/ipsec_output.c b/sys/netinet/ipsec_output.c
index 9f993c073be..24f7654e105 100644
--- a/sys/netinet/ipsec_output.c
+++ b/sys/netinet/ipsec_output.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: ipsec_output.c,v 1.40 2008/08/21 23:05:30 bluhm Exp $ */
+/*	$OpenBSD: ipsec_output.c,v 1.41 2008/08/26 12:19:01 henning Exp $ */
 /*
  * The author of this code is Angelos D. Keromytis (angelos@cis.upenn.edu)
  *
@@ -502,6 +502,7 @@ ipsp_process_done(struct mbuf *m, struct tdb *tdb)
 	/* Add pf tag if requested. */
 	if (pf_tag_packet(m, tdb->tdb_tag, -1))
 		DPRINTF(("failed to tag ipsec packet\n"));
+	pf_pkt_addr_changed(m);
 #endif
 
 	/*