From 0c7ed9d30361ebafdf250ef6413048c44a3cc34f Mon Sep 17 00:00:00 2001 From: Ruslan Ermilov Date: Tue, 13 Jun 2000 07:12:34 +0000 Subject: MFC: (rev 1.133) do not call icmp_error() if ipfirewall(4) denied packet. --- sys/netinet/ip_input.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/sys/netinet/ip_input.c b/sys/netinet/ip_input.c index 3175f80ec5d6..29a29fa42eed 100644 --- a/sys/netinet/ip_input.c +++ b/sys/netinet/ip_input.c @@ -1546,6 +1546,10 @@ ip_forward(m, srcrt) type = ICMP_SOURCEQUENCH; code = 0; break; + + case EACCES: /* ipfw denied packet */ + m_freem(mcopy); + return; } icmp_error(mcopy, type, code, dest, destifp); } -- cgit v1.2.3