diff options
| author | kp <kp@FreeBSD.org> | 2015-07-25 14:06:32 +0000 |
|---|---|---|
| committer | kp <kp@FreeBSD.org> | 2015-07-25 14:06:32 +0000 |
| commit | 2fcd3be83ef460c3efdb730beaedd97ff786c824 (patch) | |
| tree | c113dac506d15e6533bbcba38bdd281c4f2d5603 /share | |
| parent | 52037e71a3c3683265035c5ee2ad231925c63511 (diff) | |
| download | FreeBSD-src-2fcd3be83ef460c3efdb730beaedd97ff786c824.zip FreeBSD-src-2fcd3be83ef460c3efdb730beaedd97ff786c824.tar.gz | |
Pf can reassemble IPv6 fragments now.
Obtained from: bluhm (OpenBSD)
Sponsored by: Essen FreeBSD Hackathon
Diffstat (limited to 'share')
| -rw-r--r-- | share/man/man5/pf.conf.5 | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 4ed941c..02cd341 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -28,7 +28,7 @@ .\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE .\" POSSIBILITY OF SUCH DAMAGE. .\" -.Dd June 29, 2012 +.Dd July 25, 2015 .Dt PF.CONF 5 .Os .Sh NAME @@ -2381,8 +2381,10 @@ Once this limit is reached, fragments that would have to be cached are dropped until other entries time out. The timeout value can also be adjusted. .Pp -Currently, only IPv4 fragments are supported and IPv6 fragments -are blocked unconditionally. +When forwarding reassembled IPv6 packets, pf refragments them with +the original maximum fragment size. +This allows the sender to determine the optimal fragment size by +path MTU discovery. .Sh ANCHORS Besides the main ruleset, .Xr pfctl 8 |
