On Sun, Jul 09, 2006 at 04:17:11PM +0200, Peter Postma wrote:
> This patch has been a while in my tree and I completely forgot it...
> 
> It moves the PF_GENERATED m_tag to the new packet in icmp_error.
> This is needed because the pf code can call icmp_error with setting
> this tag, but the new packet should not be filtered when it comes back
> to pf(4).

To me, introducing pf-specific code outside dist/pf looks like an
abstraction violation.

Pavel Cahyna