git: pf.conf.5: describe IPv6 fragment filtering without reassembly

Aaron LI aly at crater.dragonflybsd.org
Mon Oct 19 20:33:43 PDT 2026


commit 9524753a8f44b72960568cdb308095bb09e7890c
Author: David Bidner <david at crap.solutions>
Date:   Sun Oct 4 14:54:38 2026 +0200

    pf.conf.5: describe IPv6 fragment filtering without reassembly
    
    IPv6 fragments are filtered as the Fragment header protocol, not blocked
    unconditionally. State that port/type rules cannot pass them and that a
    broad pass rule does not enforce those restrictions.
    
    Bug: https://bugs.dragonflybsd.org/issues/3438

Summary of changes:
 share/man/man5/pf.conf.5 | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/9524753a8f44b72960568cdb308095bb09e7890c


-- 
DragonFly BSD source repository


More information about the Commits mailing list