HomeFreeBSD

pfctl: Don't break connections on skipped interfaces on reload

Description

pfctl: Don't break connections on skipped interfaces on reload

On reload we used to first flush everything, including the list of skipped
interfaces. This can lead to termination of these connections if they send
packets before the new configuration is applied.

Note that this doesn't currently happen on 12 or 11, because of special EACCES
handling introduced in r315514. This special behaviour in tcp_output() may
change, hence the fix in pfctl.

PR: 214613

Details

Provenance
kpAuthored on
Parents
rS333083: Add EXAMPLES to tip(1) man page.
Branches
Unknown
Tags
Unknown