From owner-cvs-src-old@FreeBSD.ORG Wed Jun 1 19:45:13 2011 Return-Path: Delivered-To: cvs-src-old@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DE5DB106567A for ; Wed, 1 Jun 2011 19:45:13 +0000 (UTC) (envelope-from ae@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id CD2528FC1B for ; Wed, 1 Jun 2011 19:45:13 +0000 (UTC) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.4/8.14.4) with ESMTP id p51JjDvt057276 for ; Wed, 1 Jun 2011 19:45:13 GMT (envelope-from ae@repoman.freebsd.org) Received: (from svn2cvs@localhost) by repoman.freebsd.org (8.14.4/8.14.4/Submit) id p51JjDWY057275 for cvs-src-old@freebsd.org; Wed, 1 Jun 2011 19:45:13 GMT (envelope-from ae@repoman.freebsd.org) Message-Id: <201106011945.p51JjDWY057275@repoman.freebsd.org> X-Authentication-Warning: repoman.freebsd.org: svn2cvs set sender to ae@repoman.freebsd.org using -f From: "Andrey V. Elsukov" Date: Wed, 1 Jun 2011 19:44:52 +0000 (UTC) To: cvs-src-old@freebsd.org X-FreeBSD-CVS-Branch: HEAD Subject: cvs commit: src/sys/netinet/ipfw ip_fw2.c X-BeenThere: cvs-src-old@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: **OBSOLETE** CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Jun 2011 19:45:14 -0000 ae 2011-06-01 19:44:52 UTC FreeBSD src repository Modified files: sys/netinet/ipfw ip_fw2.c Log: SVN rev 222582 on 2011-06-01 19:44:52Z by ae O_FORWARD_IP is only action which depends from the result of lookup of dynamic rules. We are doing forwarding in the following cases: o For the simple ipfw fwd rule, e.g. fwd 10.0.0.1 ip from any to any out xmit em0 fwd 127.0.0.1,3128 tcp from any to any 80 in recv em1 o For the dynamic fwd rule, e.g. fwd 192.168.0.1 tcp from any to 10.0.0.3 3333 setup keep-state When this rule triggers it creates a dynamic rule, but this dynamic rule should forward packets only in forward direction. o And the last case that does not work before - simple fwd rule which triggers when some dynamic rule is already executed. PR: kern/147720, kern/150798 MFC after: 1 month Revision Changes Path 1.55 +2 -1 src/sys/netinet/ipfw/ip_fw2.c