d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

From OpenBSD, rev. 1.379

Browse Source 
Document how 'allow-opts' applies to routing headers in IPv6.

MFC after:	1 week
Discussed with:	mlaier
This commit is contained in:
dhartmei 2007-05-21 20:12:35 +00:00
parent f33636c0a2
commit b84c57b21a
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
contrib/pf/man/pf.conf.5
View File

@ -1493,13 +1493,14 @@ or
.Pc
must match.
.It Ar allow-opts
By default, packets which contain IP options are blocked.
By default, IPv4 packets with IP options or IPv6 packets with routing
extension headers are blocked.
When
.Ar allow-opts
is specified for a
.Ar pass
rule, packets that pass the filter based on that rule (last matching)
do so even if they contain IP options.
do so even if they contain IP options or routing extension headers.
For packets that match state, the rule that initially created the
state is used.
The implicit