--- fwsync/patches/ip_fw2.patch 2022/07/11 21:26:34 1.2 +++ fwsync/patches/ip_fw2.patch 2022/08/09 23:42:44 1.3 @@ -1,13 +1,24 @@ diff --git a/sys/netpfil/ipfw/ip_fw2.c b/sys/netpfil/ipfw/ip_fw2.c -index 99d3a9c58cb..450b421374f 100644 +index 99d3a9c58cb..18c5664871a 100644 --- a/sys/netpfil/ipfw/ip_fw2.c +++ b/sys/netpfil/ipfw/ip_fw2.c -@@ -186,6 +186,8 @@ ipfw_nat_cfg_t *ipfw_nat_del_ptr; +@@ -186,6 +186,9 @@ ipfw_nat_cfg_t *ipfw_nat_del_ptr; ipfw_nat_cfg_t *ipfw_nat_get_cfg_ptr; ipfw_nat_cfg_t *ipfw_nat_get_log_ptr; +VNET_DEFINE(ipfw_hook_t, hook_state) = NULL; ++VNET_DEFINE(ipfw_hook_t, sync_state) = NULL; + #ifdef SYSCTL_NODE uint32_t dummy_def = IPFW_DEFAULT_RULE; static int sysctl_ipfw_table_num(SYSCTL_HANDLER_ARGS); +@@ -2866,6 +2869,9 @@ do { \ + if (cmd->opcode == O_CHECK_STATE) + l = 0; /* exit inner loop */ + match = 1; ++ ++ if (cmd->opcode == O_CHECK_STATE && V_sync_state) ++ V_sync_state(NULL, NULL); + break; + + case O_SKIP_ACTION: