[pf] stable/12: block by OS broken

[Xin Li via freebsd-net]

Hi,

It appears that some change between 939430f2377 (December 31) and
b4bf7bdeb70 (today) on stable/12 have broken pf in a way that the
following rule:
block in quick proto tcp from any os "Linux" to any port ssh

would get interpreted as:

block drop in quick proto tcp from any to any port = 22

(and block all SSH connection instead of just the ones initiated from
Linux).

Cheers,

OpenPGP_signature
Description: OpenPGP digital signature