aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRobert Watson <rwatson@FreeBSD.org>2002-01-03 01:00:23 +0000
committerRobert Watson <rwatson@FreeBSD.org>2002-01-03 01:00:23 +0000
commite036a58daba4b407df24ee693fffee8a41ca746a (patch)
tree1a7808306e005bfd340b33875d9d33affebe931a
parent4b2ee62a910d02f2ca3ec03fac10fe6c546728bc (diff)
Notes
-rw-r--r--sbin/ipfw/ipfw.89
1 files changed, 9 insertions, 0 deletions
diff --git a/sbin/ipfw/ipfw.8 b/sbin/ipfw/ipfw.8
index 975eccafdb8a..b465609be3df 100644
--- a/sbin/ipfw/ipfw.8
+++ b/sbin/ipfw/ipfw.8
@@ -1379,6 +1379,15 @@ Packets that match a
rule should not be immediately accepted, but should continue
going through the rule list.
This may be fixed in a later version.
+.Pp
+Packets diverted to userland, and then reinserted by a userland process
+(such as
+.Xr natd 8 )
+will lose various packet attributes, including their source interface.
+If a packet is reinserted in this manner, later rules may be incorrectly
+applied, making the order of
+.Cm divert
+rules in the rule sequence very important.
.Sh AUTHORS
.An Ugen J. S. Antsilevich ,
.An Poul-Henning Kamp ,