From OpenBSD, rev. 1.379
Document how 'allow-opts' applies to routing headers in IPv6. MFC after: 1 week Discussed with: mlaier
This commit is contained in:
parent
67debc100c
commit
6cde8a4235
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=169844
@ -1493,13 +1493,14 @@ or
|
|||||||
.Pc
|
.Pc
|
||||||
must match.
|
must match.
|
||||||
.It Ar allow-opts
|
.It Ar allow-opts
|
||||||
By default, packets which contain IP options are blocked.
|
By default, IPv4 packets with IP options or IPv6 packets with routing
|
||||||
|
extension headers are blocked.
|
||||||
When
|
When
|
||||||
.Ar allow-opts
|
.Ar allow-opts
|
||||||
is specified for a
|
is specified for a
|
||||||
.Ar pass
|
.Ar pass
|
||||||
rule, packets that pass the filter based on that rule (last matching)
|
rule, packets that pass the filter based on that rule (last matching)
|
||||||
do so even if they contain IP options.
|
do so even if they contain IP options or routing extension headers.
|
||||||
For packets that match state, the rule that initially created the
|
For packets that match state, the rule that initially created the
|
||||||
state is used.
|
state is used.
|
||||||
The implicit
|
The implicit
|
||||||
|
Loading…
Reference in New Issue
Block a user