From 5810e45bfb56efc607fe18006d5f09bc48b3fddf Mon Sep 17 00:00:00 2001 From: Cy Schubert Date: Fri, 14 Apr 2017 05:25:40 +0000 Subject: [PATCH] Document change in (incorrect) ipfilter behaviour fixed by r316810. Keep frags can be used with keep state independently. --- UPDATING | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/UPDATING b/UPDATING index 6502b3b6ff6b..67ca5b527730 100644 --- a/UPDATING +++ b/UPDATING @@ -51,6 +51,15 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 12.x IS SLOW: ****************************** SPECIAL WARNING: ****************************** +20170413: + As of r316810 for ipfilter, keep frags is no longer assumed when + keep state is specified in a rule. r316810 aligns ipfilter with + documentation in man pages separating keep frags from keep state. + This allows keep state to specified without forcing keep frags + and allows keep frags to be specified independently of keep state. + To maintain previous behaviour, also specify keep frags with + keep state (as documented in ipf.conf.5. + 20170407: arm64 builds now use the base system LLD 4.0.0 linker by default, instead of requiring that the aarch64-binutils port or package be