Date: Mon, 25 May 1998 21:01:45 -0700 (PDT) From: Julian Elischer <julian@whistle.com> To: Brian Somers <brian@Awfulhak.org> Cc: Julian Elischer <julian@FreeBSD.ORG>, cvs-committers@FreeBSD.ORG, cvs-all@FreeBSD.ORG, cvs-sys@FreeBSD.ORG Subject: Re: cvs commit: src/sys/conf options src/sys/netinet ip_divert.c ip_fw.c ip_input.c ip_output.c ip_var.h Message-ID: <Pine.BSF.3.95.980525210109.1508D-100000@current1.whistle.com> In-Reply-To: <199805260146.CAA03268@awfulhak.org>
next in thread | previous in thread | raw e-mail | index | archive | help
I will but I want a few people to play with it first. On Tue, 26 May 1998, Brian Somers wrote: > How about mentioning the option in LINT ? > > > julian 1998/05/25 03:37:49 PDT > > > > Modified files: > > sys/conf options > > sys/netinet ip_divert.c ip_fw.c ip_input.c > > ip_output.c ip_var.h > > Log: > > Add optional code to change the way that divert and ipfw work together. > > Prior to this change, Accidental recursion protection was done by > > the diverted daemon feeding back the divert port number it got > > the packet on, as the port number on a sendto(). IPFW knew not to > > redivert a packet to this port (again). Processing of the ruleset > > started at the beginning again, skipping that divert port. > > > > The new semantic (which is how we should have done it the first time) > > is that the port number in the sendto() is the rule number AFTER which > > processing should restart, and on a recvfrom(), the port number is the > > rule number which caused the diversion. This is much more flexible, > > and also more intuitive. If the user uses the same sockaddr received > > when resending, processing resumes at the rule number following that > > that caused the diversion. The user can however select to resume rule > > processing at any rule. (0 is restart at the beginning) > > > > To enable the new code use > > > > option IPFW_DIVERT_RESTART > > > > This should become the default as soon as people have looked at it a bit > > > > Revision Changes Path > > 1.75 +3 -1 src/sys/conf/options > > 1.26 +43 -2 src/sys/netinet/ip_divert.c > > 1.84 +36 -1 src/sys/netinet/ip_fw.c > > 1.85 +25 -2 src/sys/netinet/ip_input.c > > 1.67 +9 -1 src/sys/netinet/ip_output.c > > 1.38 +10 -1 src/sys/netinet/ip_var.h > > Cheers. > > -- > Brian <brian@Awfulhak.org>, <brian@FreeBSD.org>, <brian@OpenBSD.org> > <http://www.Awfulhak.org> > Don't _EVER_ lose your sense of humour.... > > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95.980525210109.1508D-100000>