K 10
svn:author
V 2
kp
K 8
svn:date
V 27
2016-07-09T12:17:01.580671Z
K 7
svn:log
V 344
pf: Map hook returns onto the correct error values

pf returns PF_PASS, PF_DROP, ... in the netpfil hooks, but the hook callers
expect to get E<foo> error codes.
Map the returns values. A pass is 0 (everything is OK), anything else means
pf ate the packet, so return EACCES, which tells the stack not to emit an ICMP
error message.

PR:	207598

END