pf: Remove support for 'scrub fragment crop|drop-ovl'
authorkp <kp@FreeBSD.org>
Thu, 27 Aug 2015 21:27:47 +0000 (21:27 +0000)
committerkp <kp@FreeBSD.org>
Thu, 27 Aug 2015 21:27:47 +0000 (21:27 +0000)
commit2a1a59d8e1c46cc8561f02b5a184abab46e3b7d4
tree9ba100542f23930b13f3b6387f6c00d2bd5f2016
parentc7248d07606bf4db17d97f155ab15f66110f0fda
pf: Remove support for 'scrub fragment crop|drop-ovl'

The crop/drop-ovl fragment scrub modes are not very useful and likely to confuse
users into making poor choices.
It's also a fairly large amount of complex code, so just remove the support
altogether.

Users who have 'scrub fragment crop|drop-ovl' in their pf configuration will be
implicitly converted to 'scrub fragment reassemble'.

Reviewed by: gnn, eri
Relnotes: yes
Differential Revision: https://reviews.freebsd.org/D3466
UPDATING
sbin/pfctl/parse.y
sbin/pfctl/pfctl_parser.c
share/man/man5/pf.conf.5
sys/net/pfvar.h
sys/netpfil/pf/pf_norm.c