mirror of
https://github.com/freebsd/freebsd-src
synced 2024-11-05 18:22:52 +00:00
bb60f459a0
Prior to this change, Accidental recursion protection was done by the diverted daemon feeding back the divert port number it got the packet on, as the port number on a sendto(). IPFW knew not to redivert a packet to this port (again). Processing of the ruleset started at the beginning again, skipping that divert port. The new semantic (which is how we should have done it the first time) is that the port number in the sendto() is the rule number AFTER which processing should restart, and on a recvfrom(), the port number is the rule number which caused the diversion. This is much more flexible, and also more intuitive. If the user uses the same sockaddr received when resending, processing resumes at the rule number following that that caused the diversion. The user can however select to resume rule processing at any rule. (0 is restart at the beginning) To enable the new code use option IPFW_DIVERT_RESTART This should become the default as soon as people have looked at it a bit |
||
|---|---|---|
| .. | ||
| defines | ||
| files | ||
| files.i386 | ||
| files.newconf | ||
| files.pc98 | ||
| kern.mk | ||
| kmod.mk | ||
| majors | ||
| Makefile.i386 | ||
| Makefile.pc98 | ||
| Makefile.powerpc | ||
| newvers.sh | ||
| nfsswapkernel.c | ||
| NOTES | ||
| options | ||
| options.i386 | ||
| options.pc98 | ||
| param.c | ||
| systags.sh | ||