peter dd544baa78 Apply a patch from OPENBSD_3_6 branch (ok yamt). ... MFC: Fix by dhartmei@ IPv6 packets can contain headers (like options) before the TCP/UDP/ICMP6 header. pf finds the first TCP/UDP/ICMP6 header to filter by traversing the header chain. In the case where headers are skipped, the protocol checksum verification used the wrong length (included the skipped headers), leading to incorrectly mismatching checksums. Such IPv6 packets with headers were silently dropped. Reported by Bernhard Schmidt. ok deraadt@ dhartmei@ mcbride@		2004-12-21 12:06:37 +00:00
..
ipf/netinet	Expand out an unused byte to give each NAT rule a protocol version field,	2004-12-16 17:01:02 +00:00
pf/net	Apply a patch from OPENBSD_3_6 branch (ok yamt).	2004-12-21 12:06:37 +00:00