d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update documentation to match the behaviour of ipfw with respect

Browse Source 
to net.inet.ip.fw.one_pass.
Add to notes to explain the exact behaviour of "prob xxx" and "log"
options.

Virtually approved by: re (mentioned in rev.1.19 of ip_fw2.c)
This commit is contained in:
Luigi Rizzo 2002-11-26 19:51:40 +00:00
parent f2ec255a33
commit 99652d0eb2
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=107288
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
sbin/ipfw/ipfw.8
View File

@ -463,6 +463,9 @@ random packet drop or
.Xr dummynet 4 ) .Xr dummynet 4 )
to simulate the effect of multiple paths leading to out-of-order to simulate the effect of multiple paths leading to out-of-order
packet delivery. packet delivery.
.Pp
Note: this condition is checked before any other condition, including
ones such as keep-state or check-state which might have side effects.
.It Cm log Op Cm logamount Ar number .It Cm log Op Cm logamount Ar number
When a packet matches a rule with the When a packet matches a rule with the
.Cm log .Cm log
@ -492,6 +495,9 @@ clearing the logging counter or the packet counter for that entry, see the
.Cm resetlog .Cm resetlog
command. command.
.Pp .Pp
Note: logging is done after all other packet matching conditions
have been successfully verified, and before performing the final
action (accept, deny, etc.) on the packet.
.El .El
.Ss RULE ACTIONS .Ss RULE ACTIONS
A rule can be associated with one of the following actions, which A rule can be associated with one of the following actions, which
@ -1604,10 +1610,6 @@ When set, the packet exiting from the
pipe is not passed though the firewall again. pipe is not passed though the firewall again.
Otherwise, after a pipe action, the packet is Otherwise, after a pipe action, the packet is
reinjected into the firewall at the next rule. reinjected into the firewall at the next rule.
.Pp
Note: bridged and layer 2 packets coming out of a pipe
are never reinjected in the firewall irrespective of the
value of this variable.
.It Em net.inet.ip.fw.verbose : No 1 .It Em net.inet.ip.fw.verbose : No 1
Enables verbose messages. Enables verbose messages.
.It Em net.inet.ip.fw.verbose_limit : No 0 .It Em net.inet.ip.fw.verbose_limit : No 0