d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

From OpenBSD, rev. 1.379

Browse Source 
Document how 'allow-opts' applies to routing headers in IPv6.

MFC after:	1 week
Discussed with:	mlaier
This commit is contained in:
Daniel Hartmeier 2007-05-21 20:12:35 +00:00
parent 67debc100c
commit 6cde8a4235
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=169844
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
contrib/pf/man/pf.conf.5
View File

@ -1493,13 +1493,14 @@ or
.Pc
must match.
.It Ar allow-opts
By default, packets which contain IP options are blocked.
By default, IPv4 packets with IP options or IPv6 packets with routing
extension headers are blocked.
When
.Ar allow-opts
is specified for a
.Ar pass
rule, packets that pass the filter based on that rule (last matching)
do so even if they contain IP options.
do so even if they contain IP options or routing extension headers.
For packets that match state, the rule that initially created the
state is used.
The implicit