From owner-svn-src-user@FreeBSD.ORG Tue Mar 31 12:51:49 2009 Return-Path: Delivered-To: svn-src-user@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 89D3B1065676; Tue, 31 Mar 2009 12:51:49 +0000 (UTC) (envelope-from piso@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:4f8:fff6::2c]) by mx1.freebsd.org (Postfix) with ESMTP id 74C808FC25; Tue, 31 Mar 2009 12:51:49 +0000 (UTC) (envelope-from piso@FreeBSD.org) Received: from svn.freebsd.org (localhost [127.0.0.1]) by svn.freebsd.org (8.14.3/8.14.3) with ESMTP id n2VCpnk3000430; Tue, 31 Mar 2009 12:51:49 GMT (envelope-from piso@svn.freebsd.org) Received: (from piso@localhost) by svn.freebsd.org (8.14.3/8.14.3/Submit) id n2VCpnaj000429; Tue, 31 Mar 2009 12:51:49 GMT (envelope-from piso@svn.freebsd.org) Message-Id: <200903311251.n2VCpnaj000429@svn.freebsd.org> From: Paolo Pisati Date: Tue, 31 Mar 2009 12:51:49 +0000 (UTC) To: src-committers@freebsd.org, svn-src-user@freebsd.org X-SVN-Group: user MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Cc: Subject: svn commit: r190592 - user/piso/sbin/ipfw X-BeenThere: svn-src-user@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "SVN commit messages for the experimental " user" src tree" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 31 Mar 2009 12:51:50 -0000 Author: piso Date: Tue Mar 31 12:51:49 2009 New Revision: 190592 URL: http://svn.freebsd.org/changeset/base/190592 Log: Document the reass action. Modified: user/piso/sbin/ipfw/ipfw.8 Modified: user/piso/sbin/ipfw/ipfw.8 ============================================================================== --- user/piso/sbin/ipfw/ipfw.8 Tue Mar 31 11:04:51 2009 (r190591) +++ user/piso/sbin/ipfw/ipfw.8 Tue Mar 31 12:51:49 2009 (r190592) @@ -866,6 +866,13 @@ in any subsequent forwarding decisions. Initially this is limited to the values 0 through 15, see .Xr setfib 8 . Processing continues at the next rule. +.It Cm reass +Queue and reassemble ip fragments. +If the packet is not fragmented, counters are updated and processing continues with the next rule. +If the packet is the last logical fragment, the packet is reassembled and, if +.Va net.inet.ip.fw.one_pass +is set to 0, processing continues with the next rule, else packet is allowed to pass and search terminates. +If the packet is a fragment in the middle, it is consumed and processing stops immediately. .El .Ss RULE BODY The body of a rule contains zero or more patterns (such as