ipfw: Add defrag action.
authorSepherosa Ziehau <sephe@dragonflybsd.org>
Sat, 16 Sep 2017 06:17:52 +0000 (14:17 +0800)
committerSepherosa Ziehau <sephe@dragonflybsd.org>
Tue, 19 Sep 2017 05:05:30 +0000 (13:05 +0800)
commit6998b2437c1fb70d9beaa294270a5eaac85a0dd7
tree371bbb23a11e590e87125c43e754f489adc80545
parenta964af6f47472894f720607ad1c1e10dd4279a65
ipfw: Add defrag action.

IP fragment reassembling is almost required for stateful firewall,
and will be needed for in-kernel NAT.

NOTE: Reassemabled IP packets will be passed to the next rule for
further evaluation.
sbin/ipfw/ipfw.8
sbin/ipfw/ipfw2.c
sys/net/if_ethersubr.c
sys/net/ipfw/ip_fw2.c
sys/net/ipfw/ip_fw2.h
sys/net/pf/pf.c
sys/netinet/ip_input.c
sys/sys/mbuf.h