Since either hardware or ether input code will strip packet's vlan tag,
commit60f3eea1014142d0008e2a449b434446a2b96a63
authorSepherosa Ziehau <sephe@dragonflybsd.org>
Sat, 21 Jun 2008 06:47:29 +0000 (21 06:47 +0000)
committerSepherosa Ziehau <sephe@dragonflybsd.org>
Sat, 21 Jun 2008 06:47:29 +0000 (21 06:47 +0000)
tree701bbadab4bc16bd7b200eb1a3ec585c3868ef75
parentff86c8e009a2b30644360b1ba0dfa980f7db7db3
Since either hardware or ether input code will strip packet's vlan tag,
before the packet could reach ether level ipfw filtering, we will have
to change the packet's ether type to VLAN, if the packet was vlan tagged,
so ipfw could see the correct packet mac-type.
sys/net/ipfw/ip_fw2.c