1
0
mirror of https://git.FreeBSD.org/src.git synced 2025-01-05 12:56:08 +00:00
freebsd/share/man
Kristof Provost effaab8861 netpfil: Introduce PFIL_FWD flag
Forwarded packets passed through PFIL_OUT, which made it difficult for
firewalls to figure out if they were forwarding or producing packets. This in
turn is an issue for pf for IPv6 fragment handling: it needs to call
ip6_output() or ip6_forward() to handle the fragments. Figuring out which was
difficult (and until now, incorrect).
Having pfil distinguish the two removes an ugly piece of code from pf.

Introduce a new variant of the netpfil callbacks with a flags variable, which
has PFIL_FWD set for forwarded packets. This allows pf to reliably work out if
a packet is forwarded.

Reviewed by:	ae, kevans
Differential Revision:	https://reviews.freebsd.org/D13715
2018-03-23 16:56:44 +00:00
..
man1
man3 pthread: adding missing header to man page 2018-02-03 20:50:46 +00:00
man4 Document the limitations associated with using the audit syscalls 2018-03-21 17:22:42 +00:00
man5 Don't warn when the "hostname" rc variable is unset, but the hostname 2018-03-10 20:13:07 +00:00
man6
man7 Fix typo. 2018-03-18 16:24:11 +00:00
man8 Update the diskless manpage 2018-03-06 14:31:15 +00:00
man9 netpfil: Introduce PFIL_FWD flag 2018-03-23 16:56:44 +00:00
Makefile