Andrey V. Elsukov ad9f4d6ab6 ip[6]_tryforward does inbound and outbound packet firewall processing. ... This can lead to change of mbuf pointer (packet filter could do m_pullup(), NAT, etc). Also in case of change of destination address, tryforward can decide that packet should be handled by local system. In this case modified mbuf can be returned to the ip[6]_input(). To handle this correctly, check M_FASTFWD_OURS flag after return from ip[6]_tryforward. And if it is present, update variables that depend from mbuf pointer and skip another inbound firewall processing. No objection from: #network MFC after: 3 weeks Sponsored by: Yandex LLC Differential Revision: https://reviews.freebsd.org/D8764		2016-12-19 11:02:49 +00:00
..
dest6.c
frag6.c
icmp6.c	Make ICMPv6 hard error handling for TCP consistent with the ICMPv4	2016-10-21 10:32:57 +00:00
icmp6.h
in6_cksum.c
in6_fib.c
in6_fib.h
in6_gif.c
in6_ifattach.c	Lock the ND prefix list and add refcounting for prefixes.	2016-10-07 21:10:53 +00:00
in6_ifattach.h	Get closer to a VIMAGE network stack teardown from top to bottom rather	2016-06-21 13:48:49 +00:00
in6_jail.c	Move IPv4-specific jail functions to new file netinet/in_jail.c	2016-08-09 02:16:21 +00:00
in6_mcast.c
in6_pcb.c	This change re-adds L2 caching for TCP and UDP, as originally added in D4306	2016-06-02 17:51:29 +00:00
in6_pcb.h
in6_pcbgroup.c
in6_proto.c	The pr_destroy field does not allow us to run the teardown code in a	2016-06-01 10:14:04 +00:00
in6_rmx.c
in6_rss.c
in6_rss.h
in6_src.c
in6_var.h	Add ip6_tryforward() - a run to completion forwarding implementation	2016-12-12 10:57:32 +00:00
in6.c	Lock the ND prefix list and add refcounting for prefixes.	2016-10-07 21:10:53 +00:00
in6.h	Add net.inet6.ip6.intr_queue_maxlen sysctl. It can be used to	2016-07-15 17:09:30 +00:00
ip6_ecn.h
ip6_fastfwd.c	Add ip6_tryforward() - a run to completion forwarding implementation	2016-12-12 10:57:32 +00:00
ip6_forward.c	Remove the 4.3BSD compatible macro m_copy(), use m_copym() instead.	2016-09-15 07:41:48 +00:00
ip6_gre.c
ip6_id.c
ip6_input.c	ip[6]_tryforward does inbound and outbound packet firewall processing.	2016-12-19 11:02:49 +00:00
ip6_ipsec.c	Remove the kernel optoion for IPSEC_FILTERTUNNEL, which was deprecated	2016-08-21 18:55:30 +00:00
ip6_ipsec.h
ip6_mroute.c	Remove the 4.3BSD compatible macro m_copy(), use m_copym() instead.	2016-09-15 07:41:48 +00:00
ip6_mroute.h
ip6_output.c	Limit the number of mbufs that can be allocated for IPV6_2292PKTOPTIONS	2016-10-17 23:25:31 +00:00
ip6_var.h	The pr_destroy field does not allow us to run the teardown code in a	2016-06-01 10:14:04 +00:00
ip6.h
ip6protosw.h
ip_fw_nat64.h	Add ipfw_nat64 module that implements stateless and stateful NAT64.	2016-08-13 16:09:49 +00:00
ip_fw_nptv6.h	Add ipfw_nptv6 module that implements Network Prefix Translation for IPv6	2016-07-18 19:46:31 +00:00
mld6_var.h
mld6.c	Get closer to a VIMAGE network stack teardown from top to bottom rather	2016-06-21 13:48:49 +00:00
mld6.h
nd6_nbr.c	nd6_dad_timer(): don't assert that the address is tentative.	2016-10-01 01:30:34 +00:00
nd6_rtr.c	Lock the ND prefix list and add refcounting for prefixes.	2016-10-07 21:10:53 +00:00
nd6.c	Lock the ND prefix list and add refcounting for prefixes.	2016-10-07 21:10:53 +00:00
nd6.h	Lock the ND prefix list and add refcounting for prefixes.	2016-10-07 21:10:53 +00:00
pim6_var.h
pim6.h
raw_ip6.c	Remove the 4.3BSD compatible macro m_copy(), use m_copym() instead.	2016-09-15 07:41:48 +00:00
raw_ip6.h
route6.c
scope6_var.h
scope6.c
sctp6_usrreq.c	Whitespace changes.	2016-12-06 10:21:25 +00:00
sctp6_var.h	Whitespace changes.	2016-12-06 10:21:25 +00:00
send.c
send.h
tcp6_var.h
udp6_usrreq.c	Remove the 4.3BSD compatible macro m_copy(), use m_copym() instead.	2016-09-15 07:41:48 +00:00
udp6_var.h