mirror of
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git
synced 2025-01-22 16:44:32 +01:00
Be explicit that packets passed from a 'ipfw tee' action will not be reassembled.
Prodded by: ru
This commit is contained in:
parent
b4046cd721
commit
13177659d2
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=135213
@ -1,6 +1,6 @@
|
||||
.\" $FreeBSD$
|
||||
.\"
|
||||
.Dd June 18, 1996
|
||||
.Dd September 14, 2004
|
||||
.Dt DIVERT 4
|
||||
.Os
|
||||
.Sh NAME
|
||||
@ -128,6 +128,12 @@ packet to get diverted.
|
||||
If different fragments divert to different ports,
|
||||
then which port ultimately gets chosen is unpredictable.
|
||||
.Pp
|
||||
Note that packets arriving on the divert socket by the
|
||||
.Xr ipfw 8
|
||||
.Cm tee
|
||||
action are delivered as-is and packet fragments do not get reassembled
|
||||
in this case.
|
||||
.Pp
|
||||
Packets are received and sent unchanged, except that
|
||||
packets read as outgoing have invalid IP header checksums, and
|
||||
packets written as outgoing have their IP header checksums overwritten
|
||||
|
Loading…
Reference in New Issue
Block a user