The branch main has been updated by cy:
URL:
https://cgit.FreeBSD.org/src/commit/?id=896a0153190937e071a31c682c6cf55e4c599886
commit 896a0153190937e071a31c682c6cf55e4c599886
Author: Cy Schubert <c...@freebsd.org>
AuthorDate: 2022-01-12 21:03:46 +0000
Commit: Cy Schubert <c...@freebsd.org>
CommitDate: 2022-01-12 21:03:46 +0000
ipfilter: Fixup comment
Fix comment documenting checksum block in ip_nat.c. Fastforward doesn't
perform checksum.
MFC after: 1 week
---
sys/netpfil/ipfilter/netinet/ip_nat.c | 6 ++----
1 file changed, 2 insertions(+), 4 deletions(-)
diff --git a/sys/netpfil/ipfilter/netinet/ip_nat.c
b/sys/netpfil/ipfilter/netinet/ip_nat.c
index 1c63960e5139..8e9d555395ff 100644
--- a/sys/netpfil/ipfilter/netinet/ip_nat.c
+++ b/sys/netpfil/ipfilter/netinet/ip_nat.c
@@ -5021,10 +5021,8 @@ ipf_nat_out(fr_info_t *fin, nat_t *nat, int natadd,
u_32_t nflags)
defined(BRIDGE_IPF) || defined(__FreeBSD__)
else {
/*
- * Strictly speaking, this isn't necessary on BSD
- * kernels because they do checksum calculation after
- * this code has run BUT if ipfilter is being used
- * to do NAT as a bridge, that code doesn't exist.
+ * We always do this on FreeBSD because this code doesn't
+ * exist in fastforward.
*/
switch (nat->nat_dir)
{
