From owner-cvs-src-old@FreeBSD.ORG Wed Jul 6 06:57:23 2011 Return-Path: Delivered-To: cvs-src-old@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 78D6F1065670 for ; Wed, 6 Jul 2011 06:57:23 +0000 (UTC) (envelope-from ae@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 6783E8FC1E for ; Wed, 6 Jul 2011 06:57:23 +0000 (UTC) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.4/8.14.4) with ESMTP id p666vNSX095021 for ; Wed, 6 Jul 2011 06:57:23 GMT (envelope-from ae@repoman.freebsd.org) Received: (from svn2cvs@localhost) by repoman.freebsd.org (8.14.4/8.14.4/Submit) id p666vNlq095020 for cvs-src-old@freebsd.org; Wed, 6 Jul 2011 06:57:23 GMT (envelope-from ae@repoman.freebsd.org) Message-Id: <201107060657.p666vNlq095020@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to ae@repoman.freebsd.org using -f From: "Andrey V. Elsukov" Date: Wed, 6 Jul 2011 06:57:07 +0000 (UTC) To: cvs-src-old@freebsd.org X-FreeBSD-CVS-Branch: RELENG_7 Subject: cvs commit: src/sys/netinet ip_fw2.c X-BeenThere: cvs-src-old@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 06 Jul 2011 06:57:23 -0000 ae 2011-07-06 06:57:07 UTC FreeBSD src repository Modified files: (Branch: RELENG_7) sys/netinet ip_fw2.c Log: SVN rev 223820 on 2011-07-06 06:57:07Z by ae MFC r222582: O_FORWARD_IP is only action which depends from the result of lookup of dynamic rules. We are doing forwarding in the following cases: o For the simple ipfw fwd rule, e.g. fwd 10.0.0.1 ip from any to any out xmit em0 fwd 127.0.0.1,3128 tcp from any to any 80 in recv em1 o For the dynamic fwd rule, e.g. fwd 192.168.0.1 tcp from any to 10.0.0.3 3333 setup keep-state When this rule triggers it creates a dynamic rule, but this dynamic rule should forward packets only in forward direction. o And the last case that does not work before - simple fwd rule which triggers when some dynamic rule is already executed. PR: kern/136695, kern/147720, kern/150798 Revision Changes Path 1.175.2.21 +2 -1 src/sys/netinet/ip_fw2.c