kp 109a7b5eec netpfil: Introduce PFIL_FWD flag
Forwarded packets passed through PFIL_OUT, which made it difficult for
firewalls to figure out if they were forwarding or producing packets. This in
turn is an issue for pf for IPv6 fragment handling: it needs to call
ip6_output() or ip6_forward() to handle the fragments. Figuring out which was
difficult (and until now, incorrect).
Having pfil distinguish the two removes an ugly piece of code from pf.

Introduce a new variant of the netpfil callbacks with a flags variable, which
has PFIL_FWD set for forwarded packets. This allows pf to reliably work out if
a packet is forwarded.

Reviewed by:	ae, kevans
Differential Revision:	https://reviews.freebsd.org/D13715
2018-03-23 16:56:44 +00:00
..
2018-03-23 16:56:44 +00:00
2018-03-23 16:56:44 +00:00
2017-11-19 11:21:16 +00:00
2017-02-06 08:49:57 +00:00
2016-05-03 18:05:43 +00:00
2016-05-03 18:05:43 +00:00
2017-12-19 17:59:00 +00:00
2018-02-21 18:57:00 +00:00
2018-03-23 16:56:44 +00:00
2018-03-23 16:56:44 +00:00
2018-03-23 16:56:44 +00:00
2017-07-24 03:59:50 +00:00
2017-02-28 23:42:47 +00:00