New release notes: ipfw(8) -n flag, comma-separeted address lists.

MFC: ipfw(4) C++-style comment, rules in set 31.
This commit is contained in:
Hiroki Sato 2003-07-17 17:21:56 +00:00
parent fda6f0c4a1
commit 25153f2df6
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=117695
2 changed files with 34 additions and 6 deletions

View File

@ -178,7 +178,15 @@
<sect3 id="net-proto">
<title>Network Protocols</title>
<para>&man.ipfw.4; rules now support C++-style comment.</para>
<para>&man.ipfw.4; rules now support comma-separated address lists
(like <literal>1.2.3.4, 5.6.7.8/30, 9.10.11.12/22</literal>),
and allows spaces after commas to make lists of addresses more readable.
&merged;</para>
<para>&man.ipfw.4; rules now support C++-style comment.
The comment is stored together with the rule and appears using
&man.ipfw.8; <literal>show</literal> command.
&merged;</para>
<para>&man.ipfw.8; now allows to modify &man.ipfw.4; rules in set 31,
which was read-only and used for the default rules.
@ -186,7 +194,8 @@
command but are not deleted
by <command>ipfw flush</command> command.
So this implements a flexible form of <quote>persistent
rules</quote>. More details can be found in &man.ipfw.8;.</para>
rules</quote>. More details can be found in &man.ipfw.8;.
&merged;</para>
<para>To reduce information leakage, IPv4 packets no longer have
a <varname>ip_id</varname> field set unless fragmentation is
@ -246,7 +255,12 @@
presence of devfs, and has been removed.</para>
<para>&man.ipfw.8; <literal>list</literal> and <literal>show</literal>
command now support ranges of rule numbers.</para>
command now support ranges of rule numbers.
&merged;</para>
<para>&man.ipfw.8; now supports <option>-n</option> flag
to test the syntax of commands without actually changing anything.
&merged;</para>
<para>The <filename>libcipher</filename> DES cryptography library
has been removed. All of its functionality is provided by the

View File

@ -178,7 +178,15 @@
<sect3 id="net-proto">
<title>Network Protocols</title>
<para>&man.ipfw.4; rules now support C++-style comment.</para>
<para>&man.ipfw.4; rules now support comma-separated address lists
(like <literal>1.2.3.4, 5.6.7.8/30, 9.10.11.12/22</literal>),
and allows spaces after commas to make lists of addresses more readable.
&merged;</para>
<para>&man.ipfw.4; rules now support C++-style comment.
The comment is stored together with the rule and appears using
&man.ipfw.8; <literal>show</literal> command.
&merged;</para>
<para>&man.ipfw.8; now allows to modify &man.ipfw.4; rules in set 31,
which was read-only and used for the default rules.
@ -186,7 +194,8 @@
command but are not deleted
by <command>ipfw flush</command> command.
So this implements a flexible form of <quote>persistent
rules</quote>. More details can be found in &man.ipfw.8;.</para>
rules</quote>. More details can be found in &man.ipfw.8;.
&merged;</para>
<para>To reduce information leakage, IPv4 packets no longer have
a <varname>ip_id</varname> field set unless fragmentation is
@ -246,7 +255,12 @@
presence of devfs, and has been removed.</para>
<para>&man.ipfw.8; <literal>list</literal> and <literal>show</literal>
command now support ranges of rule numbers.</para>
command now support ranges of rule numbers.
&merged;</para>
<para>&man.ipfw.8; now supports <option>-n</option> flag
to test the syntax of commands without actually changing anything.
&merged;</para>
<para>The <filename>libcipher</filename> DES cryptography library
has been removed. All of its functionality is provided by the