git: pf.conf.5: describe IPv6 fragment filtering without reassembly
Aaron LI
aly at crater.dragonflybsd.org
Mon Oct 19 20:33:43 PDT 2026
commit 9524753a8f44b72960568cdb308095bb09e7890c
Author: David Bidner <david at crap.solutions>
Date: Sun Oct 4 14:54:38 2026 +0200
pf.conf.5: describe IPv6 fragment filtering without reassembly
IPv6 fragments are filtered as the Fragment header protocol, not blocked
unconditionally. State that port/type rules cannot pass them and that a
broad pass rule does not enforce those restrictions.
Bug: https://bugs.dragonflybsd.org/issues/3438
Summary of changes:
share/man/man5/pf.conf.5 | 13 ++++++++++---
1 file changed, 10 insertions(+), 3 deletions(-)
http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/9524753a8f44b72960568cdb308095bb09e7890c
--
DragonFly BSD source repository
More information about the Commits
mailing list