Re: firewall hooks and fragmentation in 2.0.3x

Alan Cox (alan@lxorguk.ukuu.org.uk)
Thu, 12 Jun 1997 20:48:33 +0100 (BST)


> case, I suspect that there is no specification for when and how often
> which
> bits of IP datagrams are filtered. Further, I suspect that it changes
> from
> OS revision to OS revision.

Its an irrelevant issue. Bits of the packet may pass through different
routers on different networks with different software running different
firewall code.

> Is it possible to fix on how it *ought* to work, and then document it?

ipfwadm documents it pretty thoroughly IMHO. man ipfwadm