diff options
| author | Robert Watson <rwatson@FreeBSD.org> | 2002-01-03 01:00:23 +0000 |
|---|---|---|
| committer | Robert Watson <rwatson@FreeBSD.org> | 2002-01-03 01:00:23 +0000 |
| commit | e036a58daba4b407df24ee693fffee8a41ca746a (patch) | |
| tree | 1a7808306e005bfd340b33875d9d33affebe931a | |
| parent | 4b2ee62a910d02f2ca3ec03fac10fe6c546728bc (diff) | |
Notes
| -rw-r--r-- | sbin/ipfw/ipfw.8 | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/sbin/ipfw/ipfw.8 b/sbin/ipfw/ipfw.8 index 975eccafdb8a..b465609be3df 100644 --- a/sbin/ipfw/ipfw.8 +++ b/sbin/ipfw/ipfw.8 @@ -1379,6 +1379,15 @@ Packets that match a rule should not be immediately accepted, but should continue going through the rule list. This may be fixed in a later version. +.Pp +Packets diverted to userland, and then reinserted by a userland process +(such as +.Xr natd 8 ) +will lose various packet attributes, including their source interface. +If a packet is reinserted in this manner, later rules may be incorrectly +applied, making the order of +.Cm divert +rules in the rule sequence very important. .Sh AUTHORS .An Ugen J. S. Antsilevich , .An Poul-Henning Kamp , |
