From owner-freebsd-current@FreeBSD.ORG Mon Sep 13 21:15:24 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 86E6316A4F3 for ; Mon, 13 Sep 2004 21:15:19 +0000 (GMT) Received: from c00l3r.networx.ch (c00l3r.networx.ch [62.48.2.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id BD5FD43D5A for ; Mon, 13 Sep 2004 21:15:18 +0000 (GMT) (envelope-from andre@freebsd.org) Received: (qmail 86823 invoked from network); 13 Sep 2004 21:10:52 -0000 Received: from dotat.atdotat.at (HELO [62.48.0.47]) ([62.48.0.47]) (envelope-sender ) by c00l3r.networx.ch (qmail-ldap-1.03) with SMTP for ; 13 Sep 2004 21:10:52 -0000 Message-ID: <41460DE6.6070908@freebsd.org> Date: Mon, 13 Sep 2004 23:15:18 +0200 From: Andre Oppermann User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8a1) Gecko/20040520 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Ruslan Ermilov References: <4145D02C.D02A18A0@freebsd.org> <20040913183038.GA25795@ip.net.ua> <4145EA7C.3000902@freebsd.org> <20040913185452.GB25795@ip.net.ua> <4145EE92.2060802@freebsd.org> <20040913204318.GA71517@ip.net.ua> In-Reply-To: <20040913204318.GA71517@ip.net.ua> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-current@freebsd.org Subject: Re: ipfw tee fixed [cvs commit: src/sbin/ipfw ipfw.8src/sys/netinet ip_fw_pfil.c] X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Sep 2004 21:15:25 -0000 Ruslan Ermilov wrote: > > I specifically said divert(4) not ipfw(8). ;) I'm sorry. Too many tomatoes on my eyes... ;-) What do you think of the attached patch to divert(4)? -- Andre Index: divert.4 =================================================================== RCS file: /home/ncvs/src/share/man/man4/divert.4,v retrieving revision 1.29 diff -u -p -r1.29 divert.4 --- divert.4 3 Jul 2004 18:29:20 -0000 1.29 +++ divert.4 13 Sep 2004 21:13:56 -0000 @@ -128,6 +128,11 @@ packet to get diverted. If different fragments divert to different ports, then which port ultimately gets chosen is unpredictable. .Pp +Note that packets arriving on the divert socket by the +.Xr ipfw 8 +tee action are delivered as-is and packet fragments do not get reassembled +in this case. +.Pp Packets are received and sent unchanged, except that packets read as outgoing have invalid IP header checksums, and packets written as outgoing have their IP header checksums overwritten