aboutsummaryrefslogtreecommitdiff
path: root/sys/netinet/ip_input.c
diff options
context:
space:
mode:
authorRuslan Ermilov <ru@FreeBSD.org>2000-05-15 18:41:01 +0000
committerRuslan Ermilov <ru@FreeBSD.org>2000-05-15 18:41:01 +0000
commit3a06e3e02c623432936ae796a8c74e2a047981c2 (patch)
treef566a1f9b3ded2f4ec60c92aeb57b4ba0707d75d /sys/netinet/ip_input.c
parent0e2e66b060098eaa404f00e113b3131639760bc4 (diff)
downloadsrc-3a06e3e02c623432936ae796a8c74e2a047981c2.tar.gz
src-3a06e3e02c623432936ae796a8c74e2a047981c2.zip
Do not call icmp_error() if ipfirewall(4) denied packet.
PR: kern/10747, kern/18382
Notes
Notes: svn path=/head/; revision=60612
Diffstat (limited to 'sys/netinet/ip_input.c')
-rw-r--r--sys/netinet/ip_input.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/sys/netinet/ip_input.c b/sys/netinet/ip_input.c
index 683a767341ac..b3d3c4ac369e 100644
--- a/sys/netinet/ip_input.c
+++ b/sys/netinet/ip_input.c
@@ -1649,6 +1649,10 @@ ip_forward(m, srcrt)
type = ICMP_SOURCEQUENCH;
code = 0;
break;
+
+ case EACCES: /* ipfw denied packet */
+ m_freem(mcopy);
+ return;
}
icmp_error(mcopy, type, code, dest, destifp);
}