New release notes: ipfw(8) -n flag, comma-separeted address lists.
MFC: ipfw(4) C++-style comment, rules in set 31.
This commit is contained in:
parent
fda6f0c4a1
commit
25153f2df6
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=117695
@ -178,7 +178,15 @@
|
||||
<sect3 id="net-proto">
|
||||
<title>Network Protocols</title>
|
||||
|
||||
<para>&man.ipfw.4; rules now support C++-style comment.</para>
|
||||
<para>&man.ipfw.4; rules now support comma-separated address lists
|
||||
(like <literal>1.2.3.4, 5.6.7.8/30, 9.10.11.12/22</literal>),
|
||||
and allows spaces after commas to make lists of addresses more readable.
|
||||
&merged;</para>
|
||||
|
||||
<para>&man.ipfw.4; rules now support C++-style comment.
|
||||
The comment is stored together with the rule and appears using
|
||||
&man.ipfw.8; <literal>show</literal> command.
|
||||
&merged;</para>
|
||||
|
||||
<para>&man.ipfw.8; now allows to modify &man.ipfw.4; rules in set 31,
|
||||
which was read-only and used for the default rules.
|
||||
@ -186,7 +194,8 @@
|
||||
command but are not deleted
|
||||
by <command>ipfw flush</command> command.
|
||||
So this implements a flexible form of <quote>persistent
|
||||
rules</quote>. More details can be found in &man.ipfw.8;.</para>
|
||||
rules</quote>. More details can be found in &man.ipfw.8;.
|
||||
&merged;</para>
|
||||
|
||||
<para>To reduce information leakage, IPv4 packets no longer have
|
||||
a <varname>ip_id</varname> field set unless fragmentation is
|
||||
@ -246,7 +255,12 @@
|
||||
presence of devfs, and has been removed.</para>
|
||||
|
||||
<para>&man.ipfw.8; <literal>list</literal> and <literal>show</literal>
|
||||
command now support ranges of rule numbers.</para>
|
||||
command now support ranges of rule numbers.
|
||||
&merged;</para>
|
||||
|
||||
<para>&man.ipfw.8; now supports <option>-n</option> flag
|
||||
to test the syntax of commands without actually changing anything.
|
||||
&merged;</para>
|
||||
|
||||
<para>The <filename>libcipher</filename> DES cryptography library
|
||||
has been removed. All of its functionality is provided by the
|
||||
|
@ -178,7 +178,15 @@
|
||||
<sect3 id="net-proto">
|
||||
<title>Network Protocols</title>
|
||||
|
||||
<para>&man.ipfw.4; rules now support C++-style comment.</para>
|
||||
<para>&man.ipfw.4; rules now support comma-separated address lists
|
||||
(like <literal>1.2.3.4, 5.6.7.8/30, 9.10.11.12/22</literal>),
|
||||
and allows spaces after commas to make lists of addresses more readable.
|
||||
&merged;</para>
|
||||
|
||||
<para>&man.ipfw.4; rules now support C++-style comment.
|
||||
The comment is stored together with the rule and appears using
|
||||
&man.ipfw.8; <literal>show</literal> command.
|
||||
&merged;</para>
|
||||
|
||||
<para>&man.ipfw.8; now allows to modify &man.ipfw.4; rules in set 31,
|
||||
which was read-only and used for the default rules.
|
||||
@ -186,7 +194,8 @@
|
||||
command but are not deleted
|
||||
by <command>ipfw flush</command> command.
|
||||
So this implements a flexible form of <quote>persistent
|
||||
rules</quote>. More details can be found in &man.ipfw.8;.</para>
|
||||
rules</quote>. More details can be found in &man.ipfw.8;.
|
||||
&merged;</para>
|
||||
|
||||
<para>To reduce information leakage, IPv4 packets no longer have
|
||||
a <varname>ip_id</varname> field set unless fragmentation is
|
||||
@ -246,7 +255,12 @@
|
||||
presence of devfs, and has been removed.</para>
|
||||
|
||||
<para>&man.ipfw.8; <literal>list</literal> and <literal>show</literal>
|
||||
command now support ranges of rule numbers.</para>
|
||||
command now support ranges of rule numbers.
|
||||
&merged;</para>
|
||||
|
||||
<para>&man.ipfw.8; now supports <option>-n</option> flag
|
||||
to test the syntax of commands without actually changing anything.
|
||||
&merged;</para>
|
||||
|
||||
<para>The <filename>libcipher</filename> DES cryptography library
|
||||
has been removed. All of its functionality is provided by the
|
||||
|
Loading…
Reference in New Issue
Block a user