kp
109a7b5eec
netpfil: Introduce PFIL_FWD flag
...
Forwarded packets passed through PFIL_OUT, which made it difficult for
firewalls to figure out if they were forwarding or producing packets. This in
turn is an issue for pf for IPv6 fragment handling: it needs to call
ip6_output() or ip6_forward() to handle the fragments. Figuring out which was
difficult (and until now, incorrect).
Having pfil distinguish the two removes an ugly piece of code from pf.
Introduce a new variant of the netpfil callbacks with a flags variable, which
has PFIL_FWD set for forwarded packets. This allows pf to reliably work out if
a packet is forwarded.
Reviewed by: ae, kevans
Differential Revision: https://reviews.freebsd.org/D13715
2018-03-23 16:56:44 +00:00
..
2017-12-27 03:23:21 +00:00
2017-11-20 19:43:44 +00:00
2017-11-27 15:23:17 +00:00
2017-11-20 19:43:44 +00:00
2017-11-20 19:43:44 +00:00
2017-11-20 19:43:44 +00:00
2017-11-27 15:23:17 +00:00
2017-11-27 15:23:17 +00:00
2018-03-20 22:57:06 +00:00
2017-11-20 19:43:44 +00:00
2018-03-20 22:57:06 +00:00
2017-11-27 15:23:17 +00:00
2017-11-27 15:23:17 +00:00
2017-02-15 07:22:47 +00:00
2018-03-06 12:01:31 +00:00
2017-11-18 14:26:50 +00:00
2017-11-27 15:23:17 +00:00
2018-01-24 10:13:14 +00:00
2017-11-27 15:23:17 +00:00
2017-11-27 15:23:17 +00:00
2017-11-20 19:43:44 +00:00
2017-11-18 14:26:50 +00:00
2017-11-20 19:43:44 +00:00
2018-03-23 16:56:44 +00:00
2017-11-27 15:23:17 +00:00
2017-12-23 16:45:24 +00:00
2017-11-20 19:43:44 +00:00
2017-11-27 15:23:17 +00:00
2017-11-27 15:23:17 +00:00
2017-11-20 19:43:44 +00:00
2017-11-20 19:43:44 +00:00
2017-11-20 19:43:44 +00:00
2018-03-23 16:56:44 +00:00
2017-11-27 15:23:17 +00:00
2017-11-27 15:23:17 +00:00
2018-03-23 16:56:44 +00:00
2017-11-19 11:21:16 +00:00
2017-11-20 19:43:44 +00:00
2017-12-25 04:48:39 +00:00
2017-11-20 19:43:44 +00:00
2017-11-27 15:23:17 +00:00
2017-11-27 15:23:17 +00:00
2017-03-07 00:13:53 +00:00
2017-02-06 08:49:57 +00:00
2017-11-27 15:23:17 +00:00
2018-01-04 20:05:47 +00:00
2017-05-25 23:19:09 +00:00
2017-11-27 15:23:17 +00:00
2018-03-17 17:05:48 +00:00
2017-11-20 19:43:44 +00:00
2017-11-20 19:43:44 +00:00
2017-04-11 08:56:18 +00:00
2017-11-27 15:23:17 +00:00
2018-03-15 23:32:29 +00:00
2017-11-27 15:23:17 +00:00
2017-11-27 15:23:17 +00:00
2016-05-03 18:05:43 +00:00
2016-05-03 18:05:43 +00:00
2017-11-20 19:43:44 +00:00
2017-11-29 09:40:11 +00:00
2017-11-27 15:23:17 +00:00
2017-11-27 15:23:17 +00:00
2017-11-29 09:40:11 +00:00
2016-05-24 11:47:14 +00:00
2017-11-20 19:43:44 +00:00
2017-11-20 19:43:44 +00:00
2017-11-30 11:35:22 +00:00
2018-01-21 15:42:36 +00:00
2017-12-30 19:49:40 +00:00
2017-12-30 04:03:53 +00:00
2017-11-20 19:43:44 +00:00
2017-12-06 23:03:34 +00:00
2017-12-19 17:59:00 +00:00
2018-03-02 18:48:07 +00:00
2018-02-21 18:57:00 +00:00
2017-11-20 19:43:44 +00:00
2017-11-27 15:23:17 +00:00
2017-09-23 16:46:30 +00:00
2016-05-18 04:35:58 +00:00
2016-06-07 15:07:00 +00:00
2016-07-09 02:33:45 +00:00
2016-07-09 02:33:45 +00:00
2017-11-27 15:23:17 +00:00
2017-11-27 15:23:17 +00:00
2017-11-27 15:23:17 +00:00
2017-11-27 15:23:17 +00:00
2016-10-27 09:46:22 +00:00
2017-11-27 15:23:17 +00:00
2018-03-23 16:56:44 +00:00
2018-03-23 16:56:44 +00:00
2017-11-20 19:43:44 +00:00
2018-03-23 16:56:44 +00:00
2017-11-20 19:43:44 +00:00
2017-11-20 19:43:44 +00:00
2017-11-20 19:43:44 +00:00
2017-11-20 19:43:44 +00:00
2017-11-20 19:43:44 +00:00
2017-11-20 19:43:44 +00:00
2017-11-20 19:43:44 +00:00
2017-07-24 03:59:50 +00:00
2017-02-28 23:42:47 +00:00
2018-01-23 03:15:44 +00:00
2018-01-23 03:15:39 +00:00
2017-10-11 06:08:01 +00:00
2017-10-11 06:08:01 +00:00
2018-02-21 19:13:23 +00:00
2017-12-05 18:42:07 +00:00
2017-11-20 19:43:44 +00:00
2017-11-20 19:43:44 +00:00
2017-11-27 15:23:17 +00:00
2017-11-27 15:23:17 +00:00