summaryrefslogtreecommitdiff
path: root/share
diff options
context:
space:
mode:
authorHenning Brauer <henning@cvs.openbsd.org>2007-05-28 17:22:17 +0000
committerHenning Brauer <henning@cvs.openbsd.org>2007-05-28 17:22:17 +0000
commita9414e98d077bb8e241d60f0c3c02855f006ac95 (patch)
tree79ab363a95f1faa8ede008cb7ad0c2b3d70f5b18 /share
parentb5f1212805d3298ee78485aaeb7e56be0c935c00 (diff)
pf does not use mbuf tags any more
Diffstat (limited to 'share')
-rw-r--r--share/man/man9/mbuf_tags.939
1 files changed, 1 insertions, 38 deletions
diff --git a/share/man/man9/mbuf_tags.9 b/share/man/man9/mbuf_tags.9
index 9003d9e1248..f29c96a6ab7 100644
--- a/share/man/man9/mbuf_tags.9
+++ b/share/man/man9/mbuf_tags.9
@@ -1,4 +1,4 @@
-.\" $OpenBSD: mbuf_tags.9,v 1.22 2007/05/27 13:53:56 jmc Exp $
+.\" $OpenBSD: mbuf_tags.9,v 1.23 2007/05/28 17:22:16 henning Exp $
.\"
.\" The author of this man page is Angelos D. Keromytis (angelos@cis.upenn.edu)
.\"
@@ -165,42 +165,6 @@ the packet.
Used by network cards that can compute complete packet checksums to
pass that information to higher-level protocols.
The tag contains the 2 byte checksum of the packet.
-.It PACKET_TAG_PF_TAG
-Used by
-.Xr pf 4
-to tag packets based on their purpose/behavior.
-Packets could be generated by the packet filter cached as
-fragmented, marked for queueing, or redirected to localhost.
-Packets generated, routed, or stored due to fragmentation
-by the packet filter contain no data.
-When generated by
-.Xr pf 4
-they are not tested and thus passed unconditionally.
-.Pp
-In order to prevent loops caused by subsequent matching
-routing rules, packets routed by
-.Xr pf 4
-are not tested more than once.
-.Pp
-Packets that have been cached by the fragment cache will do
-a short circuit if processed again.
-If they were to re-enter the fragcache,
-they would be indistinguishable from a
-duplicate of a previous packet and would be dropped.
-.Pp
-When queueing happens the tag will contain the ID of the
-queue this packet should go to.
-.Pp
-Another scenario takes place when TCP and UDP packets are to
-be redirected to loopback addresses.
-The functions tcp_input() and udp_input() reverse the order of
-lookups in in_pcblookup_listen(), when this tag is present, so
-unspecific listeners are matched before specific ones.
-This prevents external connections from appearing local to daemons
-such as
-.Xr portmap 8
-listening on both unspecific and specific loopback sockets in order to
-grant higher privileges to local users.
.El
.Pp
.Fn m_tag_find
@@ -284,7 +248,6 @@ The tag-manipulating code is contained in the file
.Xr gif 4 ,
.Xr gre 4 ,
.Xr ipsec 4 ,
-.Xr pf 4 ,
.Xr malloc 9
.Sh HISTORY
The packet tags first appeared in