svn commit: r190592 - user/piso/sbin/ipfw

Paolo Pisati piso at
Tue Mar 31 05:51:50 PDT 2009

Author: piso
Date: Tue Mar 31 12:51:49 2009
New Revision: 190592

  Document the reass action.


Modified: user/piso/sbin/ipfw/ipfw.8
--- user/piso/sbin/ipfw/ipfw.8	Tue Mar 31 11:04:51 2009	(r190591)
+++ user/piso/sbin/ipfw/ipfw.8	Tue Mar 31 12:51:49 2009	(r190592)
@@ -866,6 +866,13 @@ in any subsequent forwarding decisions.
 Initially this is limited to the values 0 through 15, see
 .Xr setfib 8 .
 Processing continues at the next rule.
+.It Cm reass
+Queue and reassemble ip fragments.
+If the packet is not fragmented, counters are updated and processing continues with the next rule.
+If the packet is the last logical fragment, the packet is reassembled and, if
+.Va net.inet.ip.fw.one_pass
+is set to 0, processing continues with the next rule, else packet is allowed to pass and search terminates.
+If the packet is a fragment in the middle, it is consumed and processing stops immediately.
 The body of a rule contains zero or more patterns (such as

More information about the svn-src-user mailing list