From 63315d41e1f565621b288ce693a6e855c460f821 Mon Sep 17 00:00:00 2001 From: dannyboy Date: Tue, 8 Jul 2003 13:24:42 +0000 Subject: Correct to match reality regarding interface names. PR: 51006 Submitted by: "Dmitry Pryanishnikov" mdoc clue by: "Simon L. Nielsen" MFC after: 10 days --- sbin/ipfw/ipfw.8 | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) (limited to 'sbin') diff --git a/sbin/ipfw/ipfw.8 b/sbin/ipfw/ipfw.8 index 4c4fd5f..2cc2a69 100644 --- a/sbin/ipfw/ipfw.8 +++ b/sbin/ipfw/ipfw.8 @@ -2119,9 +2119,13 @@ going through the rule list. This may be fixed in a later version. .Pp Packets diverted to userland, and then reinserted by a userland process -(such as -.Xr natd 8 ) -will lose various packet attributes, including their source interface. +may lose various packet attributes. +The packet source interface name +will be preserved if it is shorter than 8 bytes and the userland process +saves and reuses the sockaddr_in +(as does +.Xr natd 8 ) ; +otherwise, it may be lost. If a packet is reinserted in this manner, later rules may be incorrectly applied, making the order of .Cm divert -- cgit v1.1