d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

When addr/mask examples are given, show both a host and network

Browse Source 
address, to avoid confusing the users that a full address is
always required.

Submitted by:   Josh Paetzel <josh@tcbug.org> (through freebsd-doc)
MFC after:	3 days
This commit is contained in:
Giorgos Keramidas 2006-10-04 19:29:05 +00:00
parent c10b34ed19
commit 223ccb5450
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=163012
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
sbin/ipfw/ipfw.8
View File

@ -951,20 +951,20 @@ Hostnames are resolved at the time the rule is added to the firewall list.
.It Ar addr Ns / Ns Ar masklen .It Ar addr Ns / Ns Ar masklen
Matches all addresses with base Matches all addresses with base
.Ar addr .Ar addr
(specified as an IP address or a hostname) (specified as an IP address, a network number, or a hostname)
and mask width of and mask width of
.Cm masklen .Cm masklen
bits. bits.
As an example, 1.2.3.4/25 will match As an example, 1.2.3.4/25 or 1.2.3.0/25 will match
all IP numbers from 1.2.3.0 to 1.2.3.127 . all IP numbers from 1.2.3.0 to 1.2.3.127 .
.It Ar addr Ns : Ns Ar mask .It Ar addr Ns : Ns Ar mask
Matches all addresses with base Matches all addresses with base
.Ar addr .Ar addr
(specified as an IP address or a hostname) (specified as an IP address, a network number, or a hostname)
and the mask of and the mask of
.Ar mask , .Ar mask ,
specified as a dotted quad. specified as a dotted quad.
As an example, 1.2.3.4:255.0.255.0 will match As an example, 1.2.3.4:255.0.255.0 or 1.0.3.0:255.0.255.0 will match
1.*.3.*. 1.*.3.*.
This form is advised only for non-contiguous This form is advised only for non-contiguous
masks. masks.
@ -977,7 +977,7 @@ error-prone.
.It Ar list : Bro Ar num | num-num Brc Ns Op Ns , Ns Ar list .It Ar list : Bro Ar num | num-num Brc Ns Op Ns , Ns Ar list
Matches all addresses with base address Matches all addresses with base address
.Ar addr .Ar addr
(specified as an IP address or a hostname) (specified as an IP address, a network number, or a hostname)
and whose last byte is in the list between braces { } . and whose last byte is in the list between braces { } .
Note that there must be no spaces between braces and Note that there must be no spaces between braces and
numbers (spaces after commas are allowed). numbers (spaces after commas are allowed).
@ -997,6 +997,7 @@ bitmask, it takes constant time and dramatically reduces
the complexity of rulesets. the complexity of rulesets.
.br .br
As an example, an address specified as 1.2.3.4/24{128,35-55,89} As an example, an address specified as 1.2.3.4/24{128,35-55,89}
or 1.2.3.0/24{128,35-55,89}
will match the following IP addresses: will match the following IP addresses:
.br .br
1.2.3.128, 1.2.3.35 to 1.2.3.55, 1.2.3.89 . 1.2.3.128, 1.2.3.35 to 1.2.3.55, 1.2.3.89 .