Merge pull request #2960 in SNORT/snort3 from ~MDAGON/snort3:reject to master

Squashed commit of the following:

commit df880cdbcad839afa1d1daac99ea790bf75bed02
Author: Maya Dagon <mdagon@cisco.com>
Date:   Fri Jun 25 15:15:54 2021 -0400

    packet_io: check if unreachable_candidate before sending unreachable

diff --git a/src/packet_io/active.cc b/src/packet_io/active.cc
index b93d12116a76649948f8f9c2614f6dda222539b5..a7528e700da2390b41ceb51faca2c3fab01a5f03 100644 (file)
--- a/src/packet_io/active.cc
+++ b/src/packet_io/active.cc
@@ -166,10 +166,13 @@ void Active::kill_session(Packet* p, EncodeFlags flags)
         break;
 
     default:
-        if ( packet_force_dropped() )
-            send_unreach(p, UnreachResponse::FWD);
-        else
-            send_unreach(p, UnreachResponse::PORT);
+        if (is_unreachable_candidate(p))
+        {
+            if ( packet_force_dropped() )
+                send_unreach(p, UnreachResponse::FWD);
+            else
+                send_unreach(p, UnreachResponse::PORT);
+        }
         break;
     }
 }