kp 109a7b5eec netpfil: Introduce PFIL_FWD flag ... Forwarded packets passed through PFIL_OUT, which made it difficult for firewalls to figure out if they were forwarding or producing packets. This in turn is an issue for pf for IPv6 fragment handling: it needs to call ip6_output() or ip6_forward() to handle the fragments. Figuring out which was difficult (and until now, incorrect). Having pfil distinguish the two removes an ugly piece of code from pf. Introduce a new variant of the netpfil callbacks with a flags variable, which has PFIL_FWD set for forwarded packets. This allows pf to reliably work out if a packet is forwarded. Reviewed by: ae, kevans Differential Revision: https://reviews.freebsd.org/D13715		2018-03-23 16:56:44 +00:00
..
ipfw	Do not try to reassemble IPv6 fragments in "reass" rule.	2018-03-12 09:40:46 +00:00
pf	netpfil: Introduce PFIL_FWD flag	2018-03-23 16:56:44 +00:00