When addr/mask examples are given, show both a host and network
address, to avoid confusing the users that a full address is always required. Submitted by: Josh Paetzel <josh@tcbug.org> (through freebsd-doc) MFC after: 3 days
This commit is contained in:
parent
c10b34ed19
commit
223ccb5450
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=163012
@ -951,20 +951,20 @@ Hostnames are resolved at the time the rule is added to the firewall list.
|
|||||||
.It Ar addr Ns / Ns Ar masklen
|
.It Ar addr Ns / Ns Ar masklen
|
||||||
Matches all addresses with base
|
Matches all addresses with base
|
||||||
.Ar addr
|
.Ar addr
|
||||||
(specified as an IP address or a hostname)
|
(specified as an IP address, a network number, or a hostname)
|
||||||
and mask width of
|
and mask width of
|
||||||
.Cm masklen
|
.Cm masklen
|
||||||
bits.
|
bits.
|
||||||
As an example, 1.2.3.4/25 will match
|
As an example, 1.2.3.4/25 or 1.2.3.0/25 will match
|
||||||
all IP numbers from 1.2.3.0 to 1.2.3.127 .
|
all IP numbers from 1.2.3.0 to 1.2.3.127 .
|
||||||
.It Ar addr Ns : Ns Ar mask
|
.It Ar addr Ns : Ns Ar mask
|
||||||
Matches all addresses with base
|
Matches all addresses with base
|
||||||
.Ar addr
|
.Ar addr
|
||||||
(specified as an IP address or a hostname)
|
(specified as an IP address, a network number, or a hostname)
|
||||||
and the mask of
|
and the mask of
|
||||||
.Ar mask ,
|
.Ar mask ,
|
||||||
specified as a dotted quad.
|
specified as a dotted quad.
|
||||||
As an example, 1.2.3.4:255.0.255.0 will match
|
As an example, 1.2.3.4:255.0.255.0 or 1.0.3.0:255.0.255.0 will match
|
||||||
1.*.3.*.
|
1.*.3.*.
|
||||||
This form is advised only for non-contiguous
|
This form is advised only for non-contiguous
|
||||||
masks.
|
masks.
|
||||||
@ -977,7 +977,7 @@ error-prone.
|
|||||||
.It Ar list : Bro Ar num | num-num Brc Ns Op Ns , Ns Ar list
|
.It Ar list : Bro Ar num | num-num Brc Ns Op Ns , Ns Ar list
|
||||||
Matches all addresses with base address
|
Matches all addresses with base address
|
||||||
.Ar addr
|
.Ar addr
|
||||||
(specified as an IP address or a hostname)
|
(specified as an IP address, a network number, or a hostname)
|
||||||
and whose last byte is in the list between braces { } .
|
and whose last byte is in the list between braces { } .
|
||||||
Note that there must be no spaces between braces and
|
Note that there must be no spaces between braces and
|
||||||
numbers (spaces after commas are allowed).
|
numbers (spaces after commas are allowed).
|
||||||
@ -997,6 +997,7 @@ bitmask, it takes constant time and dramatically reduces
|
|||||||
the complexity of rulesets.
|
the complexity of rulesets.
|
||||||
.br
|
.br
|
||||||
As an example, an address specified as 1.2.3.4/24{128,35-55,89}
|
As an example, an address specified as 1.2.3.4/24{128,35-55,89}
|
||||||
|
or 1.2.3.0/24{128,35-55,89}
|
||||||
will match the following IP addresses:
|
will match the following IP addresses:
|
||||||
.br
|
.br
|
||||||
1.2.3.128, 1.2.3.35 to 1.2.3.55, 1.2.3.89 .
|
1.2.3.128, 1.2.3.35 to 1.2.3.55, 1.2.3.89 .
|
||||||
|
Loading…
Reference in New Issue
Block a user