svn commit: r190592 - user/piso/sbin/ipfw

[Paolo Pisati]

Author: piso
Date: Tue Mar 31 12:51:49 2009
New Revision: 190592
URL: http://svn.freebsd.org/changeset/base/190592

Log:
  Document the reass action.

Modified:
  user/piso/sbin/ipfw/ipfw.8

Modified: user/piso/sbin/ipfw/ipfw.8
==============================================================================
--- user/piso/sbin/ipfw/ipfw.8	Tue Mar 31 11:04:51 2009	(r190591)
+++ user/piso/sbin/ipfw/ipfw.8	Tue Mar 31 12:51:49 2009	(r190592)
@@ -866,6 +866,13 @@ in any subsequent forwarding decisions.
 Initially this is limited to the values 0 through 15, see
 .Xr setfib 8 .
 Processing continues at the next rule.
+.It Cm reass
+Queue and reassemble ip fragments.
+If the packet is not fragmented, counters are updated and processing continues with the next rule.
+If the packet is the last logical fragment, the packet is reassembled and, if
+.Va net.inet.ip.fw.one_pass
+is set to 0, processing continues with the next rule, else packet is allowed to pass and search terminates.
+If the packet is a fragment in the middle, it is consumed and processing stops immediately.
 .El
 .Ss RULE BODY
 The body of a rule contains zero or more patterns (such as