freebsd-dev/share/man/man4/ipfirewall.4

.\"
.\" $FreeBSD$
.\"
.Dd October 28, 2002
.Dt IPFW 4
.Os
.Sh NAME
.Nm ipfw
.Nd IP packet filter and traffic accounting
.Sh DESCRIPTION
The
.Nm
system facility allows filtering,
redirecting, and other operations on
.Tn IP
packets travelling through
network interfaces.
.Pp
The user interface for
.Nm
is implemented by the
.Xr ipfw 8
utility, so please refer to the
.Xr ipfw 8
manpage for a complete description of the
.Nm
capabilities and how to use it.
.Ss Kernel Options
The following options in the kernel configuration file are related to
.Nm
operation:
.Pp
.Bl -tag -width ".Dv IPFIREWALL_VERBOSE_LIMIT" -compact
.It Dv IPFIREWALL
enable
.Nm
.It Dv IPFIREWALL_VERBOSE
enable
.Nm
logging
.It Dv IPFIREWALL_VERBOSE_LIMIT
limit
.Nm
logging
.It Dv IPDIVERT
enable
.Xr divert 4
sockets
.El
.Sh SEE ALSO
.Xr setsockopt 2 ,
.Xr divert 4 ,
.Xr ip 4 ,
.Xr ipfw 8 ,
.Xr sysctl 8 ,
.Xr syslogd 8 ,
.Xr pfil 9
add missing cvs Id lines. 1997-03-07 02:50:01 +00:00			`.\"`
$Id$ -> $FreeBSD$ 1999-08-28 00:22:10 +00:00			`.\" $FreeBSD$`
add missing cvs Id lines. 1997-03-07 02:50:01 +00:00			`.\"`
mdoc(7) police: scheduled sweep. Approved by: re 2002-11-29 11:39:20 +00:00			`.Dd October 28, 2002`
Remove stale information from these two manpage, and point the readers to the one up-to-date page which is ipfw(8). MFC after: 3 days 2002-10-28 07:24:58 +00:00			`.Dt IPFW 4`
Move ipfirewall.4 & snp.4 facility manpage to share/man/man4 1995-02-17 18:48:36 +00:00			`.Os`
			`.Sh NAME`
Remove stale information from these two manpage, and point the readers to the one up-to-date page which is ipfw(8). MFC after: 3 days 2002-10-28 07:24:58 +00:00			`.Nm ipfw`
Make this file bare a small resemblance to reality again Requested from: Archie Cobbs (archie@whistle.com) 1997-06-23 02:12:21 +00:00			`.Nd IP packet filter and traffic accounting`
Move ipfirewall.4 & snp.4 facility manpage to share/man/man4 1995-02-17 18:48:36 +00:00			`.Sh DESCRIPTION`
mdoc(7) police: scheduled sweep. Approved by: re 2002-11-29 11:39:20 +00:00			`The`
			`.Nm`
			`system facility allows filtering,`
			`redirecting, and other operations on`
			`.Tn IP`
			`packets travelling through`
			`network interfaces.`
A QUICK pass through this man page to make it conform to mdoc standards and to clean up some of the English. The job is nowhere complete. This man page would be a good project for someone who knows something about the firewall software, and would like to contribute to the documentation effort. Many of the things in this man page are out of date and do not reflect reality. 1996-07-11 02:37:59 +00:00			`.Pp`
Remove stale information from these two manpage, and point the readers to the one up-to-date page which is ipfw(8). MFC after: 3 days 2002-10-28 07:24:58 +00:00			`The user interface for`
mdoc(7) police: scheduled sweep. Approved by: re 2002-11-29 11:39:20 +00:00			`.Nm`
Remove stale information from these two manpage, and point the readers to the one up-to-date page which is ipfw(8). MFC after: 3 days 2002-10-28 07:24:58 +00:00			`is implemented by the`
			`.Xr ipfw 8`
mdoc(7) police: scheduled sweep. Approved by: re 2002-11-29 11:39:20 +00:00			`utility, so please refer to the`
			`.Xr ipfw 8`
			`manpage for a complete description of the`
			`.Nm`
			`capabilities and how to use it.`
			`.Ss Kernel Options`
Remove stale information from these two manpage, and point the readers to the one up-to-date page which is ipfw(8). MFC after: 3 days 2002-10-28 07:24:58 +00:00			`The following options in the kernel configuration file are related to`
mdoc(7) police: scheduled sweep. Approved by: re 2002-11-29 11:39:20 +00:00			`.Nm`
Remove stale information from these two manpage, and point the readers to the one up-to-date page which is ipfw(8). MFC after: 3 days 2002-10-28 07:24:58 +00:00			`operation:`
mdoc(7) police: scheduled sweep. Approved by: re 2002-11-29 11:39:20 +00:00			`.Pp`
			`.Bl -tag -width ".Dv IPFIREWALL_VERBOSE_LIMIT" -compact`
			`.It Dv IPFIREWALL`
			`enable`
			`.Nm`
			`.It Dv IPFIREWALL_VERBOSE`
More mdoc fixes: Use Dv and Va macros for defined values and variables, respectively. Use proper tag lists instead of approximations. Use Xr for cross-references. Make illegal sections legal subsections. Use An and Aq to mark up author names and addresses, Respectively. 2000-03-07 22:45:32 +00:00			`enable`
			`.Nm`
mdoc(7) police: scheduled sweep. Approved by: re 2002-11-29 11:39:20 +00:00			`logging`
			`.It Dv IPFIREWALL_VERBOSE_LIMIT`
			`limit`
			`.Nm`
			`logging`
			`.It Dv IPDIVERT`
More mdoc fixes: Use Dv and Va macros for defined values and variables, respectively. Use proper tag lists instead of approximations. Use Xr for cross-references. Make illegal sections legal subsections. Use An and Aq to mark up author names and addresses, Respectively. 2000-03-07 22:45:32 +00:00			`enable`
			`.Xr divert 4`
			`sockets`
			`.El`
Move ipfirewall.4 & snp.4 facility manpage to share/man/man4 1995-02-17 18:48:36 +00:00			`.Sh SEE ALSO`
A QUICK pass through this man page to make it conform to mdoc standards and to clean up some of the English. The job is nowhere complete. This man page would be a good project for someone who knows something about the firewall software, and would like to contribute to the documentation effort. Many of the things in this man page are out of date and do not reflect reality. 1996-07-11 02:37:59 +00:00			`.Xr setsockopt 2 ,`
Make this file bare a small resemblance to reality again Requested from: Archie Cobbs (archie@whistle.com) 1997-06-23 02:12:21 +00:00			`.Xr divert 4 ,`
Sort cross refereces in section SEE ALSO. 1997-09-29 10:11:02 +00:00			`.Xr ip 4 ,`
Make this file bare a small resemblance to reality again Requested from: Archie Cobbs (archie@whistle.com) 1997-06-23 02:12:21 +00:00			`.Xr ipfw 8 ,`
Document that the IPFW messages are logged via syslogd(8). 2001-02-22 09:12:44 +00:00			`.Xr sysctl 8 ,`
Note that IPFIREWALL depends on PFIL_HOOKS compiled into the kernel as well. Submitted by: ceri, simon (mdoc fixes) 2004-08-19 18:04:10 +00:00			`.Xr syslogd 8 ,`
			`.Xr pfil 9`