1
0
mirror of https://github.com/openbsd/src.git synced 2026-04-24 22:26:03 +00:00

only run pf on incoming packets on untagged (port native vlan) packets.

This commit is contained in:
dlg
2025-11-26 01:43:56 +00:00
parent 6603af83d0
commit 3a5ac944e1

View File

@@ -1,4 +1,4 @@
/* $OpenBSD: if_veb.c,v 1.56 2025/11/25 11:56:46 dlg Exp $ */
/* $OpenBSD: if_veb.c,v 1.57 2025/11/26 01:43:56 dlg Exp $ */
/*
* Copyright (c) 2021 David Gwynne <dlg@openbsd.org>
@@ -1251,7 +1251,7 @@ veb_port_input(struct ifnet *ifp0, struct mbuf *m, uint64_t dst, void *brport,
goto drop;
#if NPF > 0
if (ISSET(ifp->if_flags, IFF_LINK1) &&
if (ISSET(ifp->if_flags, IFF_LINK1) && p->p_pvid == ctx->vs &&
(m = veb_pf(ifp0, PF_IN, m, ctx.ns)) == NULL)
return (NULL);
#endif