Author: cy
Date: Fri Apr 14 05:25:40 2017
New Revision: 316814
URL: https://svnweb.freebsd.org/changeset/base/316814

Log:
  Document change in (incorrect) ipfilter behaviour fixed by r316810.
  Keep frags can be used with keep state independently.

Modified:
  head/UPDATING

Modified: head/UPDATING
==============================================================================
--- head/UPDATING       Fri Apr 14 05:25:21 2017        (r316813)
+++ head/UPDATING       Fri Apr 14 05:25:40 2017        (r316814)
@@ -51,6 +51,15 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 12
 
 ****************************** SPECIAL WARNING: ******************************
 
+20170413:
+       As of r316810 for ipfilter, keep frags is no longer assumed when
+       keep state is specified in a rule. r316810 aligns ipfilter with
+       documentation in man pages separating keep frags from keep state.
+       This allows keep state to specified without forcing keep frags
+       and allows keep frags to be specified independently of keep state.
+       To maintain previous behaviour, also specify keep frags with
+       keep state (as documented in ipf.conf.5.
+
 20170407:
        arm64 builds now use the base system LLD 4.0.0 linker by default,
        instead of requiring that the aarch64-binutils port or package be
_______________________________________________
svn-src-head@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-head
To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"

Reply via email to