svn commit: r316814 - head

[Cy Schubert]

Author: cy
Date: Fri Apr 14 05:25:40 2017
New Revision: 316814
URL: https://svnweb.freebsd.org/changeset/base/316814

Log:
  Document change in (incorrect) ipfilter behaviour fixed by r316810.
  Keep frags can be used with keep state independently.

Modified:
  head/UPDATING

Modified: head/UPDATING
==============================================================================
--- head/UPDATING	Fri Apr 14 05:25:21 2017	(r316813)
+++ head/UPDATING	Fri Apr 14 05:25:40 2017	(r316814)
@@ -51,6 +51,15 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 12
 
 ****************************** SPECIAL WARNING: ******************************
 
+20170413:
+	As of r316810 for ipfilter, keep frags is no longer assumed when
+	keep state is specified in a rule. r316810 aligns ipfilter with
+	documentation in man pages separating keep frags from keep state.
+	This allows keep state to specified without forcing keep frags
+	and allows keep frags to be specified independently of keep state.
+	To maintain previous behaviour, also specify keep frags with
+	keep state (as documented in ipf.conf.5.
+
 20170407:
 	arm64 builds now use the base system LLD 4.0.0 linker by default,
 	instead of requiring that the aarch64-binutils port or package be