freebsd-dev/sbin/pfctl
Kristof Provost 57e047e51c pf: allow scrub rules without fragment reassemble
scrub rules have defaulted to handling fragments for a long time, but
since we removed "fragment crop" and "fragment drop-ovl" in 64b3b4d611
this has become less obvious and more expensive ("reassemble" being the
more expensive option, even if it's the one the vast majority of users
should be using).

Extend the 'scrub' syntax to allow fragment reassembly to be disabled,
while retaining the other scrub behaviour (e.g. TTL changes, random-id,
..) using 'scrub fragment no reassemble'.

Sponsored by:	Rubicon Communications, LLC ("Netgate")
Differential Revision:	https://reviews.freebsd.org/D37459
2022-11-28 20:19:05 +01:00
..
tests pf: allow scrub rules without fragment reassemble 2022-11-28 20:19:05 +01:00
Makefile pfctl: Move ioctl abstraction functions into libpfctl 2021-04-10 11:16:02 +02:00
Makefile.depend
parse.y pf: allow scrub rules without fragment reassemble 2022-11-28 20:19:05 +01:00
pf_print_state.c pfctl: cache getprotobynumber results 2021-07-01 21:31:45 +00:00
pf_ruleset.c pf: add anchor support for ether rules 2022-03-02 17:00:07 +01:00
pf.os Move pf.os to sbin/pfctl/ 2018-08-11 13:58:26 +00:00
pfctl_altq.c pfctl(8): Fix a typo in a source code comment 2022-07-16 13:48:30 +02:00
pfctl_ioctl.h pfctl: Move ioctl abstraction functions into libpfctl 2021-04-10 11:16:02 +02:00
pfctl_optimize.c pfctl: remove unused variable 2022-03-08 13:57:46 +01:00
pfctl_osfp.c
pfctl_parser.c pf: allow scrub rules without fragment reassemble 2022-11-28 20:19:05 +01:00
pfctl_parser.h pfctl: print ethernet rules when called with '-n' 2022-03-02 17:00:08 +01:00
pfctl_qstats.c Extended pf(4) ioctl interface and pfctl(8) to allow bandwidths of 2018-08-22 19:38:48 +00:00
pfctl_radix.c pfctl: Fix mismatch in array bounds for pfr_next_token(). 2022-10-03 16:10:41 -07:00
pfctl_table.c
pfctl.8 pfctl.8: Use the serial comma 2022-03-03 18:32:27 +01:00
pfctl.c pf: use time_to for timestamps 2022-10-05 17:52:27 +02:00
pfctl.h pf: add anchor support for ether rules 2022-03-02 17:00:07 +01:00