CVS Update: src

[Dan Brosemer <odin@akbar.cleannorth.org>]

CVSROOT:	/cvs
Module name:	src
Repository:	src/sys/net/
Changes by:	odin@akbar.cleannorth.org.	04/11/23 09:15:50

Modified files:
	src/sys/net/: pf.c 

Log message:
	From OPENBSD_3_6
	
	MFC:
	Fix by dhartmei@
	
	reset anchor pointer to NULL when stepping back into the main ruleset,
	fixes pflog attributing states wrongly to anchors and pfctl -vvsn/sr
	showing wrong state counters for anchor rules. found by camield@
	
	ok deraadt@ dhartmei@
	
	MFC:
	Fix by dhartmei@
	
	For RST generated due to state mismatch during handshake, don't set
	th_flags TH_ACK and leave th_ack 0, just like the RST generated by
	the stack in this case. Fixes the Raptor workaround.
	
	ok deraadt@ dhartmei@
	
	MFC:
	Fix by dhartmei@
	
	The flag to re-filter pf-generated packets was set wrong by synproxy
	for ACKs. It should filter the ACK replayed to the server, instead of
	of the one to the client.
	
	ok deraadt@ dhartmei@