d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add a note that ipfw states do not implicitly match ICMP error messages.

Browse Source
This commit is contained in:
Yaroslav Tykhiy 2008-02-07 11:00:42 +00:00
parent a00672cff9
commit 5702f0f0a5
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=176084
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
sbin/ipfw/ipfw.8
View File

@ -2711,3 +2711,9 @@ ipfw nat is not compatible with the tcp segmentation offloading
(TSO). Thus, to reliably nat your network traffic, please disable TSO
on your NICs using
.Xr ifconfig 8 .
.Pp
ICMP error messages are not implicitly matched by dynamic rules
for the respective conversations.
To avoid failures of network error detection and path MTU discovery,
ICMP error messages may need to be allowed explicitly through static
rules.