Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 3 Jan 2002 00:56:05 -0800 (PST)
From:      Julian Elischer <julian@elischer.org>
To:        Robert Watson <rwatson@FreeBSD.org>
Cc:        cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/sbin/ipfw ipfw.8
Message-ID:  <Pine.BSF.4.21.0201030054260.22265-100000@InterJet.elischer.org>
In-Reply-To: <200201030100.g0310NQ98239@freefall.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
However this is NOT TRUE if you use the same sockaddr
because the source address is encoded into the 
8 bytes after the address.

(This is documented in the divert man page I believe)

you can also SET the source address by encoding the bytes there yourself.
I believe NATD keeps this information but I may be wrong.


On Wed, 2 Jan 2002, Robert Watson wrote:

> rwatson     2002/01/02 17:00:23 PST
> 
>   Modified files:
>     sbin/ipfw            ipfw.8 
>   Log:
>   o Note that packets diverted using a 'divert' socket, and then
>     reinserted by a userland process, will lose a number of packet
>     attributes, including their source interface.  This may affect
>     the behavior of later rules, and while not strictly a BUG, may
>     cause unexpected behavior if not clearly documented.  A similar
>     note for natd(8) might be desirable.
>   
>   Revision  Changes    Path
>   1.100     +9 -0      src/sbin/ipfw/ipfw.8
> 


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0201030054260.22265-100000>