From 3f237372c95c11695eaee398f09092d86a8a8741 Mon Sep 17 00:00:00 2001
From: Neil Alexander <neilalexander@users.noreply.github.com>
Date: Mon, 8 Oct 2018 19:05:50 +0100
Subject: [PATCH] Only apply session firewall to pings for sessions we don't
 already have

---
 src/yggdrasil/session.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/yggdrasil/session.go b/src/yggdrasil/session.go
index 3ed118b3..1b8d1cbd 100644
--- a/src/yggdrasil/session.go
+++ b/src/yggdrasil/session.go
@@ -390,7 +390,7 @@ func (ss *sessions) handlePing(ping *sessionPing) {
 	// Get the corresponding session (or create a new session)
 	sinfo, isIn := ss.getByTheirPerm(&ping.SendPermPub)
 	// Check the session firewall
-	if ss.sessionFirewallEnabled {
+	if !isIn && ss.sessionFirewallEnabled {
 		if !ss.isSessionAllowed(&ping.SendPermPub) {
 			return
 		}