From owner-cvs-src@FreeBSD.ORG  Sat Nov 19 07:57:52 2005
Return-Path: <owner-cvs-src@FreeBSD.ORG>
X-Original-To: cvs-src@freebsd.org
Delivered-To: cvs-src@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7513216A420;
	Sat, 19 Nov 2005 07:57:52 +0000 (GMT)
	(envelope-from julian@elischer.org)
Received: from delight.idiom.com (outbound.idiom.com [216.240.47.196])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 3668243D46;
	Sat, 19 Nov 2005 07:57:52 +0000 (GMT)
	(envelope-from julian@elischer.org)
Received: from idiom.com (idiom.com [216.240.32.1])
	by delight.idiom.com (Postfix) with ESMTP id 9552F22611C;
	Fri, 18 Nov 2005 23:57:51 -0800 (PST)
Received: from [192.168.2.5] (home.elischer.org [216.240.48.38])
	by idiom.com (8.12.11/8.12.11) with ESMTP id jAJ7vnSX028735;
	Fri, 18 Nov 2005 23:57:51 -0800 (PST)
	(envelope-from julian@elischer.org)
Message-ID: <437EDAFC.2070008@elischer.org>
Date: Fri, 18 Nov 2005 23:57:48 -0800
From: Julian Elischer <julian@elischer.org>
User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US;
	rv:1.7.11) Gecko/20050727
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Ruslan Ermilov <ru@freebsd.org>
References: <200511190607.jAJ6700C075492@repoman.freebsd.org>
	<437EC789.1090709@elischer.org> <20051119073238.GD20188@ip.net.ua>
In-Reply-To: <20051119073238.GD20188@ip.net.ua>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: cvs-src@freebsd.org, src-committers@freebsd.org,
	Hajimu UMEMOTO <ume@freebsd.org>, cvs-all@freebsd.org
Subject: Re: cvs commit: src/etc rc.firewall
X-BeenThere: cvs-src@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: CVS commit messages for the src tree <cvs-src.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-src>
List-Post: <mailto:cvs-src@freebsd.org>
List-Help: <mailto:cvs-src-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-src>,
	<mailto:cvs-src-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 19 Nov 2005 07:57:52 -0000

Ruslan Ermilov wrote:

>On Fri, Nov 18, 2005 at 10:34:49PM -0800, Julian Elischer wrote:
>  
>
>>Hajimu UMEMOTO wrote:
>>
>>    
>>
>>>ume         2005-11-19 06:06:59 UTC
>>>
>>>FreeBSD src repository
>>>
>>>Modified files:        (Branch: RELENG_6)
>>>  etc                  rc.firewall 
>>>Log:
>>>MFC 1.48: don't match packets other than IPv4 against divert rule.
>>>divert supports only IPv4.
>>>
>>>Revision   Changes    Path 
>>>1.47.10.1  +1 -1      src/etc/rc.firewall
>>>
>>>
>>>      
>>>
>>huh?
>>divert of an ipv6 packet still makes sense!
>>
>>    
>>
>But not with the natd(8) as a listener.
>  
>

well then natd should  be defensive about it and you should
not divert ipv6 packets there..

I currently divert all sorts of stuff  and would be rather annoyed of
divert didn't divert a packet I had singled out for diversion.
I also have patches that allow me to divert from a bridge and from the 
link layer.


>
>Cheers,
>  
>