Change Details

The default rule is used to call PFLOG_PACKET macro and the reason is given directly for when e.g. PFRES_SHORT is invoked and PF_DROP is carried out. However, the action is not passed down directly so a copy of the default rule needs to be made to be able to set the correct action in the pflog header.

The default rule is used to call PFLOG_PACKET macro and the reason is given directly for when e.g. PFRES_SHORT is invoked and PF_DROP is carried out. However, the action is not passed down directly so action needs to be adjusted when the default rule made the decision due to a non-matching reason, which means PF_DROP. OpenBSD fix: https://github.com/openbsd/src/commit/7b8683a1743e7

The default rule is used to call PFLOG_PACKET macro and the reason is given directly for when e.g. PFRES_SHORT is invoked and PF_DROP is carried out. However, the action is not passed down directly so a copy of the default rule needs to be made to be able to set theaction needs to be adjusted when the default rule made the decision correct action in the pflog header.due to a non-matching reason, which means PF_DROP. OpenBSD fix: https://github.com/openbsd/src/commit/7b8683a1743e7