HomeFreeBSD

pf: Improve route-to handling of pfsync'd states

Description

pf: Improve route-to handling of pfsync'd states

When a state if pfsync’d to a different host it doesn’t get all of the
expected pointers, including the pointer to the struct pfi_kif / struct
ifnet rt_kif pointer. (I.e. the interface to route out on).

That in turn means that pf_route() ends up dropping the packet.

Use the rule's struct pfi_kif pointer so we can still route out of the
expected interface.

MFC after: 2 weeks
Sponsored by: Orange Business Services

(cherry picked from commit 81ef217ad428c29be669aac2166d194db31817a7)

Details

Provenance
kpAuthored on Jun 4 2022, 10:38 AM
Parents
rGb8ab9651b1e4: Fix e013e369 mismerge which is causes i386 LINT fails to build.
Branches
Unknown
Tags
Unknown