d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Finally document "via" feature..

Browse Source
This commit is contained in:
Ugen J.S. Antsilevich 1995-02-17 15:44:08 +00:00
parent 7f4c79484b
commit 96fd3f53e8
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=6522
1 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
sbin/ipfw/ipfw.8
View File

@ -58,11 +58,11 @@ This is <chain-entry pattern> structure:
"dst" to "src").
The <proto/addr pattern> is:
all|icmp from <src addr/mask> to <dst addr/mask>
tcp|tcpsyn|udp from <src addr/mask> [ports] to <dst addr/mask> [ports]
all matches any IP packet.
icmp,tcp and udp - packets for corresponding protocols.
tcpsyn - tcp SYN packets (which used when initiating connection).
all|icmp from <src addr/mask> to <dst addr/mask> [via <addr>]
tcp[syn]|udp from <src addr/mask>[ports] to <dst addr/mask>[ports][via <addr>]
all matches any IP packet.
icmp,tcp and udp - packets for corresponding protocols.
tcpsyn - tcp SYN packets (which used when initiating connection).
The <src addr/mask>:
<INET IP addr | domain name> [/mask bits | :mask pattern]
@ -70,6 +70,10 @@ The <src addr/mask>:
Mask pattern has form of IP address and AND'ed logically with address given.
[ports]: [ port,port....|port:port]
Name of service can be used instead of port numeric value.
The via <addr> is optional and may specify IP address/name of one of local
IP interfaces to match only packets coming through it.The IP given is NOT
checked,and wrong value of IP causes entry to not match anything.
To l[ist] command may be passed:
f[irewall] | a[ccounting] to list specific chain or none to list