From a7d6cd2dfcef277c03994fab1f6aec513cdcd8ef Mon Sep 17 00:00:00 2001 From: Dmitry Morozovsky Date: Tue, 22 Jul 2025 15:32:34 +0300 Subject: [PATCH] extend description of net.inet.ip.fw.one_pass Description of net.inet.ip.fw.one_pass tunable refers only to dummynet(4), while in reality is applicable on any divert-like packet action like in-kernel nat, netgraph, reass, or similar. Reviewed by: ae MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D51436 --- sys/netpfil/ipfw/ip_fw2.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sys/netpfil/ipfw/ip_fw2.c b/sys/netpfil/ipfw/ip_fw2.c index e43d1a8fbbf..0e0ecd3c6b2 100644 --- a/sys/netpfil/ipfw/ip_fw2.c +++ b/sys/netpfil/ipfw/ip_fw2.c @@ -197,7 +197,7 @@ SYSCTL_NODE(_net_inet_ip, OID_AUTO, fw, CTLFLAG_RW | CTLFLAG_MPSAFE, 0, "Firewall"); SYSCTL_INT(_net_inet_ip_fw, OID_AUTO, one_pass, CTLFLAG_VNET | CTLFLAG_RW | CTLFLAG_SECURE3, &VNET_NAME(fw_one_pass), 0, - "Only do a single pass through ipfw when using dummynet(4)"); + "Only do a single pass through ipfw when using dummynet(4), ipfw_nat or other divert(4)-like interfaces"); SYSCTL_INT(_net_inet_ip_fw, OID_AUTO, autoinc_step, CTLFLAG_VNET | CTLFLAG_RW, &VNET_NAME(autoinc_step), 0, "Rule number auto-increment step");