Date: Mon, 23 Dec 2019 12:20:58 +0300 From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: Gleb Smirnoff <glebius@freebsd.org> Cc: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: Re: svn commit: r343631 - in head: . sbin sbin/pfilctl share/man/man9 sys/contrib/ipfilter/netinet sys/net sys/netinet sys/netinet6 sys/netpfil/ipfw sys/netpfil/pf Message-ID: <eca4f7fc-f6e3-11ca-6778-919c27fc5428@yandex.ru> In-Reply-To: <20191220221415.GU2706@FreeBSD.org> References: <201901312301.x0VN13lM097213@repo.freebsd.org> <f88b296e-d03a-8c43-3202-6ece60974b10@yandex.ru> <20191220221415.GU2706@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --7OFBiQOAjyGo7WWEmRVjawecomRia8O3D Content-Type: multipart/mixed; boundary="GDqUXJVC026hZAx5O9EdaTS588kuhLamF"; protected-headers="v1" From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: Gleb Smirnoff <glebius@freebsd.org> Cc: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Message-ID: <eca4f7fc-f6e3-11ca-6778-919c27fc5428@yandex.ru> Subject: Re: svn commit: r343631 - in head: . sbin sbin/pfilctl share/man/man9 sys/contrib/ipfilter/netinet sys/net sys/netinet sys/netinet6 sys/netpfil/ipfw sys/netpfil/pf References: <201901312301.x0VN13lM097213@repo.freebsd.org> <f88b296e-d03a-8c43-3202-6ece60974b10@yandex.ru> <20191220221415.GU2706@FreeBSD.org> In-Reply-To: <20191220221415.GU2706@FreeBSD.org> --GDqUXJVC026hZAx5O9EdaTS588kuhLamF Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 21.12.2019 01:14, Gleb Smirnoff wrote: > A> > Another future feature is possiblity to create pfil heads, that = provide > A> > not an mbuf pointer but just a memory pointer with length. That = would > A> > allow filtering at very early stages of a packet lifecycle, e.g.= when > A> > packet has just been received by a NIC and no mbuf was yet alloc= ated. > A> It seems that this commit has changed the error code returned from > A> ip[6]_output() when a packet is blocked. Previously it was EACCES, b= ut > A> now it became EPERM. Was it intentional? >=20 > I don't think that was intentional. Can you please review this patch? LGTM, thanks! --=20 WBR, Andrey V. Elsukov --GDqUXJVC026hZAx5O9EdaTS588kuhLamF-- --7OFBiQOAjyGo7WWEmRVjawecomRia8O3D Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQEzBAEBCAAdFiEE5lkeG0HaFRbwybwAAcXqBBDIoXoFAl4AhvoACgkQAcXqBBDI oXpHIQgArYozNTmPp9GDP3bQnt5Z3KkWad+6pYkG+jUG/II86zX89lmvCTc2wRCh i4npymF/JzpLRhuQak/fWlRK5SdVgq1yLIZva0SGaBCo/jAaXs3f4NjlpzLh/zE8 NfQiZO5E4XgbG05fvGlrU3EAClKf0v5k6S9a3ueSueMZsU4Ly/LM2aPlLktxxtN4 KZdEqc5w/ajYG3sH5xbXuEyOtF0zvS4wfO4HI+GDT2/FsNYMPg+VY0mIeTIsCy+G OQqZ4WE7OlaFNUq6EJrbEvE74zQNjH7VTij+ua7upunmcShtxHED1fAiGIc/lMGw Tj9BVUZiq91PuO9Vpcohr3zAxOxN4A== =5rZp -----END PGP SIGNATURE----- --7OFBiQOAjyGo7WWEmRVjawecomRia8O3D--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?eca4f7fc-f6e3-11ca-6778-919c27fc5428>