diff options
| author | hrs <hrs@FreeBSD.org> | 2005-02-23 16:54:03 +0000 |
|---|---|---|
| committer | hrs <hrs@FreeBSD.org> | 2005-02-23 16:54:03 +0000 |
| commit | 5b54fb1016aebc4f114acc933b9e1d0010243286 (patch) | |
| tree | 7980f94bf26b6a61680bf9cdf45b71ada9cd1af7 /release | |
| parent | 9dac197aca2dc63e55ba15320d84f236bfd01006 (diff) | |
| download | FreeBSD-src-5b54fb1016aebc4f114acc933b9e1d0010243286.zip FreeBSD-src-5b54fb1016aebc4f114acc933b9e1d0010243286.tar.gz | |
New release notes:
IPFIREWALL_FORWARD_EXTENDED kernel option.
Diffstat (limited to 'release')
| -rw-r--r-- | release/doc/en_US.ISO8859-1/relnotes/article.sgml | 10 | ||||
| -rw-r--r-- | release/doc/en_US.ISO8859-1/relnotes/common/new.sgml | 10 |
2 files changed, 20 insertions, 0 deletions
diff --git a/release/doc/en_US.ISO8859-1/relnotes/article.sgml b/release/doc/en_US.ISO8859-1/relnotes/article.sgml index 9b4a703..57e8445 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/article.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/article.sgml @@ -325,6 +325,16 @@ of the &man.altq.4;, packets via a divert socket, and TCP data length.</para> + <para>&man.ipfw.8; <literal>ipfw fwd</literal> rule now supports + the full packet destination manipulation when the kernel option + <literal>options IPFIREWALL_FORWARD_EXTENDED</literal> is specified + in addition to <literal>options IPFIRWALL_FORWARD</literal>. + This kernel option disables all restrictions to ensure proper + behavior for locally generated packets and allows to redirect + packets destined to locally configured IP addresses. + Note that &man.ipfw.8; rules have to be carefully crafted to + make sure that things like PMTU discovery do not break.</para> + <para>Ongoing work is reducing the use of the Giant lock by the network protocol stack and improving the locking strategies.</para> diff --git a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml index 9b4a703..57e8445 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml @@ -325,6 +325,16 @@ of the &man.altq.4;, packets via a divert socket, and TCP data length.</para> + <para>&man.ipfw.8; <literal>ipfw fwd</literal> rule now supports + the full packet destination manipulation when the kernel option + <literal>options IPFIREWALL_FORWARD_EXTENDED</literal> is specified + in addition to <literal>options IPFIRWALL_FORWARD</literal>. + This kernel option disables all restrictions to ensure proper + behavior for locally generated packets and allows to redirect + packets destined to locally configured IP addresses. + Note that &man.ipfw.8; rules have to be carefully crafted to + make sure that things like PMTU discovery do not break.</para> + <para>Ongoing work is reducing the use of the Giant lock by the network protocol stack and improving the locking strategies.</para> |
