From owner-cvs-src@FreeBSD.ORG  Mon Feb 16 02:59:48 2004
Return-Path: <owner-cvs-src@FreeBSD.ORG>
Delivered-To: cvs-src@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id E408316A4CE; Mon, 16 Feb 2004 02:59:48 -0800 (PST)
Received: from salmon.maths.tcd.ie (salmon.maths.tcd.ie [134.226.81.11])
	by mx1.FreeBSD.org (Postfix) with SMTP
	id A5E7343D1D; Mon, 16 Feb 2004 02:59:47 -0800 (PST)
	(envelope-from dwmalone@maths.tcd.ie)
Received: from walton.maths.tcd.ie by salmon.maths.tcd.ie with SMTP
          id <aa61466@salmon>; 16 Feb 2004 10:59:47 +0000 (GMT)
To: Alfred Perlstein <alfred@freebsd.org>
In-reply-to: Your message of "Sun, 15 Feb 2004 22:28:47 PST."
             <20040216062847.GA98877@elvis.mu.org> 
X-Request-Do: 
Date: Mon, 16 Feb 2004 10:59:46 +0000
From: David Malone <dwmalone@maths.tcd.ie>
Message-ID: <200402161059.aa61466@salmon.maths.tcd.ie>
cc: cvs-src@freebsd.org
cc: src-committers@freebsd.org
cc: cvs-all@freebsd.org
Subject: Re: cvs commit: src/sys/net if_ethersubr.c 
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Feb 2004 10:59:49 -0000

> >   Return EACCES rather than ENOBUFS if ipfw blocks a packet on the
> >   way out at layer 2.

> I think ipfw returns EPERM when denying packets through some other
> paths.  

Previously I'd just made sure that blocking a ping at layer 2 and
layer 3 return the same error after this commit. I just did a quick
check. Ip_output returns EACCES, ip_input and ether_demux can't
return an error.

Ipfw does return EPERM if you try to alter the rules but aren't
permitted to, but that's a different situation I guess.

	David.