Date: Tue, 31 Mar 2009 12:51:49 +0000 (UTC) From: Paolo Pisati <piso@FreeBSD.org> To: src-committers@freebsd.org, svn-src-user@freebsd.org Subject: svn commit: r190592 - user/piso/sbin/ipfw Message-ID: <200903311251.n2VCpnaj000429@svn.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: piso Date: Tue Mar 31 12:51:49 2009 New Revision: 190592 URL: http://svn.freebsd.org/changeset/base/190592 Log: Document the reass action. Modified: user/piso/sbin/ipfw/ipfw.8 Modified: user/piso/sbin/ipfw/ipfw.8 ============================================================================== --- user/piso/sbin/ipfw/ipfw.8 Tue Mar 31 11:04:51 2009 (r190591) +++ user/piso/sbin/ipfw/ipfw.8 Tue Mar 31 12:51:49 2009 (r190592) @@ -866,6 +866,13 @@ in any subsequent forwarding decisions. Initially this is limited to the values 0 through 15, see .Xr setfib 8 . Processing continues at the next rule. +.It Cm reass +Queue and reassemble ip fragments. +If the packet is not fragmented, counters are updated and processing continues with the next rule. +If the packet is the last logical fragment, the packet is reassembled and, if +.Va net.inet.ip.fw.one_pass +is set to 0, processing continues with the next rule, else packet is allowed to pass and search terminates. +If the packet is a fragment in the middle, it is consumed and processing stops immediately. .El .Ss RULE BODY The body of a rule contains zero or more patterns (such as
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200903311251.n2VCpnaj000429>