From owner-cvs-all@FreeBSD.ORG  Mon Feb 16 16:09:51 2004
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id D43BB16A4D6; Mon, 16 Feb 2004 16:09:51 -0800 (PST)
Received: from elvis.mu.org (elvis.mu.org [192.203.228.196])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id D051743D1D; Mon, 16 Feb 2004 16:09:51 -0800 (PST)
	(envelope-from bright@elvis.mu.org)
Received: by elvis.mu.org (Postfix, from userid 1192)
	id CBBA35C771; Mon, 16 Feb 2004 16:09:51 -0800 (PST)
Date: Mon, 16 Feb 2004 16:09:51 -0800
From: Alfred Perlstein <alfred@freebsd.org>
To: David Malone <dwmalone@maths.tcd.ie>
Message-ID: <20040217000951.GD55055@elvis.mu.org>
References: <20040216062847.GA98877@elvis.mu.org>
	<200402161059.aa61466@salmon.maths.tcd.ie>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <200402161059.aa61466@salmon.maths.tcd.ie>
User-Agent: Mutt/1.4.2i
cc: cvs-src@freebsd.org
cc: src-committers@freebsd.org
cc: cvs-all@freebsd.org
Subject: Re: cvs commit: src/sys/net if_ethersubr.c
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Feb 2004 00:09:52 -0000

Ok, sorry, faulty dimm installed. :)

* David Malone <dwmalone@maths.tcd.ie> [040216 02:59] wrote:
> > >   Return EACCES rather than ENOBUFS if ipfw blocks a packet on the
> > >   way out at layer 2.
> 
> > I think ipfw returns EPERM when denying packets through some other
> > paths.  
> 
> Previously I'd just made sure that blocking a ping at layer 2 and
> layer 3 return the same error after this commit. I just did a quick
> check. Ip_output returns EACCES, ip_input and ether_demux can't
> return an error.
> 
> Ipfw does return EPERM if you try to alter the rules but aren't
> permitted to, but that's a different situation I guess.
> 
> 	David.

-- 
- Alfred Perlstein
- Research Engineering Development Inc.
- email: bright@mu.org cell: 408-480-4684