--- - branch: netbsd-8 date: Sat Mar 31 10:41:06 UTC 2018 files: - new: 1.123.4.3 old: 1.123.4.2 path: src/sys/netinet/in_proto.c pathrev: src/sys/netinet/in_proto.c@1.123.4.3 type: modified - new: 1.117.4.4 old: 1.117.4.3 path: src/sys/netinet6/in6_proto.c pathrev: src/sys/netinet6/in6_proto.c@1.117.4.4 type: modified id: 20180331T104106Z.0c7b32a7e65a2154fdfda2b527fe23f72ea0a575 log: "Pull up following revision(s) (requested by maxv in ticket #676):\n\n\tsys/netinet/in_proto.c: revision 1.127\n\tsys/netinet6/in6_proto.c: revision 1.122\n\nAdd the PR_LASTHDR flag on the PFsync and CARP entries. Otherwise a\n\"require\" IPsec policy is not enforced on them, and unauthenticated\npackets will be accepted.\n\nTested with a require-AH configuration. Sent on tech-net@, no comment.\n" module: src subject: 'CVS commit: [netbsd-8] src/sys' unixtime: '1522492866' user: martin