d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Mention affect of securelevel 3 and higher on attempts to change filter lists.

Browse Source 
Prompted by:	PR docs/7785
This commit is contained in:
Guy Helmer 1998-12-16 17:10:03 +00:00
parent 04b2ac6e73
commit b46dfa405c
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=41873
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
sbin/ipfw/ipfw.8
View File

@ -511,6 +511,11 @@ ipfw flush
.Ed
.Pp
in similar surroundings is also a bad idea.
.Pp
The IP filter list may not be modified if the system security level
is set to 3 or higher (see
.Xr init 8
for information on system security levels).
.Sh PACKET DIVERSION
A divert socket bound to the specified port will receive all packets diverted
to that port; see
@ -551,6 +556,7 @@ This rule diverts all incoming packets from 192.168.2.0/24 to divert port 5000:
.Xr ipfirewall 4 ,
.Xr protocols 5 ,
.Xr services 5 ,
.Xr init 8 ,
.Xr reboot 8 ,
.Xr sysctl 8 ,
.Xr syslogd 8