[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

CVS: cvs.openbsd.org: src



CVSROOT:	/cvs
Module name:	src
Changes by:	mcbride_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org	2006/10/11 02:42:31

Modified files:
	sys/net        : pfvar.h pf.c 
	sbin/pfctl     : parse.y 

Log message:
Allow the 'quick' keyword on an anchor. IFF there is a matching rule inside
the anchor, terminate ruleset evaluation when stepping out of the anchor.

This means that if you absolutely want the anchor to be terminal, you
probably want to use a 'block all' or 'pass all' rule at the start of the
anchor.

ok dhartmei@ henning@ deraadt@



Visit your host, monkey.org