upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-05-28 04:12:45 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

pf: only force state failure logging if logging was requested

Browse source 
PR: https://forum.opnsense.org/index.php?topic=45801.0
Fixes: 1a2a481
This commit is contained in:
Franco Fichtner 2025-03-12 11:19:58 +01:00
parent 77f8132af9
commit 4f4ebd2896
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
sys/netpfil/pf/pf.c
View file

@ -5084,7 +5084,9 @@ pf_test_rule(struct pf_krule **rm, struct pf_kstate **sm, struct pfi_kkif *kif,
hdrlen, &match_rules);
sk = nk = NULL;
if (action != PF_PASS) {
pd->act.log |= PF_LOG_FORCE;
/* XXX force drop log only for eligible rules */
if (r->log || (nr != NULL && nr->log))
pd->act.log |= PF_LOG_FORCE;
if (action == PF_DROP &&
(r->rule_flag & PFRULE_RETURN))
pf_return(r, nr, pd, off, m, th, kif,