]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Evaluate packet size after the firewall had its chance
authorKristof Provost <kp@FreeBSD.org>
Tue, 7 Apr 2015 20:29:03 +0000 (20:29 +0000)
committerKristof Provost <kp@FreeBSD.org>
Tue, 7 Apr 2015 20:29:03 +0000 (20:29 +0000)
commit53deb05c362697471b8672a5ab4d4187cac0532b
tree9a0ff4a83a23a93487904241f98d53bf6b014d9e
parentdd3856601d978410015c4079bfdec99d0246e2a7
Evaluate packet size after the firewall had its chance

Defer the packet size check until after the firewall has had a look at it. This
means that the firewall now has the opportunity to (re-)fragment an oversized
packet.

Differential Revision: https://reviews.freebsd.org/D1815
Reviewed by: ae
Approved by: gnn (mentor)
sys/netinet6/ip6_forward.c