Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 10 Jan 2002 17:38:46 +0200
From:      Ruslan Ermilov <ru@FreeBSD.org>
To:        Julian Elischer <julian@elischer.org>
Cc:        Robert Watson <rwatson@FreeBSD.org>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/sbin/ipfw ipfw.8
Message-ID:  <20020110173846.D98225@sunbay.com>
In-Reply-To: <Pine.BSF.4.21.0201030054260.22265-100000@InterJet.elischer.org>
References:  <200201030100.g0310NQ98239@freefall.freebsd.org> <Pine.BSF.4.21.0201030054260.22265-100000@InterJet.elischer.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jan 03, 2002 at 12:56:05AM -0800, Julian Elischer wrote:
> However this is NOT TRUE if you use the same sockaddr
> because the source address is encoded into the 
> 8 bytes after the address.
> 
> (This is documented in the divert man page I believe)
> 
Yes.

> you can also SET the source address by encoding the bytes there yourself.
> I believe NATD keeps this information but I may be wrong.
> 
Also true.

Robert, could you please explain what you have seen wrong with
natd(8) in more details, or back your change out?

In any case, I believe this sort of explanation belongs into
the divert(4) manpage.

> On Wed, 2 Jan 2002, Robert Watson wrote:
> 
> > rwatson     2002/01/02 17:00:23 PST
> > 
> >   Modified files:
> >     sbin/ipfw            ipfw.8 
> >   Log:
> >   o Note that packets diverted using a 'divert' socket, and then
> >     reinserted by a userland process, will lose a number of packet
> >     attributes, including their source interface.  This may affect
> >     the behavior of later rules, and while not strictly a BUG, may
> >     cause unexpected behavior if not clearly documented.  A similar
> >     note for natd(8) might be desirable.
> >   
> >   Revision  Changes    Path
> >   1.100     +9 -0      src/sbin/ipfw/ipfw.8


Cheers,
-- 
Ruslan Ermilov		Oracle Developer/DBA,
ru@sunbay.com		Sunbay Software AG,
ru@FreeBSD.org		FreeBSD committer,
+380.652.512.251	Simferopol, Ukraine

http://www.FreeBSD.org	The Power To Serve
http://www.oracle.com	Enabling The Information Age

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020110173846.D98225>