Module Name: src Committed By: martin Date: Sat Mar 31 10:41:06 UTC 2018
Modified Files: src/sys/netinet [netbsd-8]: in_proto.c src/sys/netinet6 [netbsd-8]: in6_proto.c Log Message: Pull up following revision(s) (requested by maxv in ticket #676): sys/netinet/in_proto.c: revision 1.127 sys/netinet6/in6_proto.c: revision 1.122 Add the PR_LASTHDR flag on the PFsync and CARP entries. Otherwise a "require" IPsec policy is not enforced on them, and unauthenticated packets will be accepted. Tested with a require-AH configuration. Sent on tech-net@, no comment. To generate a diff of this commit: cvs rdiff -u -r1.123.4.2 -r1.123.4.3 src/sys/netinet/in_proto.c cvs rdiff -u -r1.117.4.3 -r1.117.4.4 src/sys/netinet6/in6_proto.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.