rmind / npf

NPF: packet filter with stateful inspection, NAT, IP sets, etc.
Other
239 stars 42 forks source link

Pass-through block-return packets so they are not subject to rules. #115

Closed rmind closed 3 years ago

rmind commented 3 years ago

This way the block-return packets are not dropped by accident and no additional rules are needed to let block-return packets reliably out.

Patch contributed by Frank Kardel (kardel at netbsd.org).