Maxim Konovalov
057c654813
o Markup and grammar fixes.
2007-12-14 14:34:26 +00:00
Ceri Davies
a1bad2e6dc
Bump .Dd for r1.63; fix small nit from the same.
2007-12-10 12:03:23 +00:00
Poul-Henning Kamp
c80d9b5937
Add a bit more detailed description about a configuration
...
file format and about using NAT "instances".
Submitted by: "Andrey V. Elsukov" <bu7cher@yandex.ru>
2007-12-10 07:50:07 +00:00
Ruslan Ermilov
6a5796e734
Eliminate macro calls inside literal displays.
2005-01-15 12:28:01 +00:00
Joe Marcus Clarke
b07fbc17e9
Add Cisco Skinny Station protocol support to libalias, natd, and ppp.
...
Skinny is the protocol used by Cisco IP phones to talk to Cisco Call
Managers. With this code, one can use a Cisco IP phone behind a FreeBSD
NAT gateway.
Currently, having the Call Manager behind the NAT gateway is not supported.
More information on enabling Skinny support in libalias, natd, and ppp
can be found in those applications' manpages.
PR: 55843
Reviewed by: ru
Approved by: ru
MFC after: 30 days
2003-09-23 07:41:55 +00:00
Ruslan Ermilov
5105f9919f
- Clarify the port range syntax in -redirect_port.
...
PR: docs/46286
- "IP number" -> "IP address", for consistency.
2003-08-13 15:13:33 +00:00
Ruslan Ermilov
b79840a6db
Added an option to specify an alternate PID file.
...
PR: bin/37159
Submitted by: "Aleksandr A. Babaylov" <.@babolo.ru>
2003-08-13 13:16:19 +00:00
Ruslan Ermilov
3d23e8b897
If the -proxy_only option is used, the -alias_address/-interface
...
options are not required.
Suggested by: Vaclav Petricek
MFC after: 2 weeks
2003-06-13 22:15:42 +00:00
Ruslan Ermilov
01ba618f4a
Don't pretend natd(8) doesn't work with ppp(8) interfaces.
...
While there's probably a better way to achieve the same,
nothing precludes us from using natd(8) on tun(4) links.
Noticed by: bde
2003-02-28 15:41:45 +00:00
Ruslan Ermilov
496f81e0bb
Fixed Charles' e-mail here too.
2003-01-23 08:35:21 +00:00
Ruslan Ermilov
e091d0c2ac
can not -> cannot.
2002-08-13 14:10:36 +00:00
Ruslan Ermilov
aa7998d4a1
mdoc(7) police: canonize FreeBSD in e-mail address.
2002-08-13 12:07:40 +00:00
Philippe Charnier
e1205e80e5
The .Nm utility
2002-07-06 19:34:18 +00:00
Archie Cobbs
0099af422c
Update my email address.
2002-07-03 20:50:32 +00:00
Ruslan Ermilov
e21a315ec5
s/sysctl -w/sysctl/
2001-12-11 08:29:10 +00:00
Ruslan Ermilov
c0956cf876
Make -log_ipfw_denied active by default with -verbose.
...
Discussed with: phk
2001-11-27 11:06:02 +00:00
Ruslan Ermilov
3843533e18
Fixed (local) style bugs in previous revision.
2001-11-27 11:00:16 +00:00
Poul-Henning Kamp
84ef95bd6e
Do not uselessly whine in syslog about packets denied by ipfw rules.
...
Set 'log_ipfw_denied' option if you want the old behaviour.
PR: 30255
Submitted by: Flemming "F3" Jacobsen <fj@batmule.dk>
Reviewed by: phk
MFC after: 4 weeks
2001-10-31 16:08:49 +00:00
Ruslan Ermilov
c4d9468ea0
mdoc(7) police:
...
Avoid using parenthesis enclosure macros (.Pq and .Po/.Pc) with plain text.
Not only this slows down the mdoc(7) processing significantly, but it also
has an undesired (in this case) effect of disabling hyphenation within the
entire enclosed block.
2001-08-07 15:48:51 +00:00
Ruslan Ermilov
9fe48c6e8d
mdoc(7) police: removed HISTORY info from the .Os call.
2001-07-10 11:04:34 +00:00
Ruslan Ermilov
eb0838029f
mdoc(7) police: normalize .Nd.
2001-04-18 15:54:10 +00:00
Ruslan Ermilov
d0353b836e
mdoc(7) police: split punctuation characters + misc fixes.
2001-02-01 16:38:02 +00:00
Ruslan Ermilov
7c7fb079b9
mdoc(7) police: use the new features of the Nm macro.
2000-11-20 16:52:27 +00:00
Ruslan Ermilov
d2a46bc99d
Describe -deny_incoming better, highlight some keywords,
...
add myself to the AUTHORS section.
2000-11-16 12:20:54 +00:00
Ben Smithurst
32e5e4cfc3
more removal of trailing periods from SEE ALSO.
2000-11-15 16:44:24 +00:00
Ruslan Ermilov
ecd1fe62de
Suggest looking at rc.conf(5) on how to start natd(8) during boot.
...
Submitted by: dcs
2000-07-17 10:06:54 +00:00
Ruslan Ermilov
f685a909b5
"Ease understanding" of how -punch_fw works.
...
Reviewed by: sheldonh
2000-06-29 09:52:14 +00:00
Ruslan Ermilov
bc4ebb98dc
Added new option (-punch_fw) which allows to `punch holes'
...
in the ipfirewall(4) for incoming FTP/IRC DCC connections.
Submitted by: Rene de Vries <rene@canyon.demon.nl>
Rewritten by: ru
2000-06-27 15:26:24 +00:00
Ruslan Ermilov
5a424c8cc0
- mdoc(7) style cleanup
...
- new version of security note from alex.
2000-06-27 11:39:36 +00:00
Alexander Langer
7731ee5af9
Back out both previous commits.
...
The first one got screwed up by me because of rev 1.33, which was
incorrectly merged into my patches by myself, and so Ruslan (maintainer)
asked me to back them out.
Ruslan was ok with the second one, but since it needs rework, it'll be
readded later, when it doesn't conflict with the backout of the first one.
Pointy hat: alex
Beer on next meeting: ru
2000-06-26 17:18:34 +00:00
Alexander Langer
54c593c69c
Add note about security concerns w/o a firewall but other machines
...
on your LAN to the "RUNNING NATD" introduction.
In a different way requested by:
PR: 18802
Submitted by: Zachary K Drew <drew0054@tc.umn.edu>
2000-06-26 14:52:39 +00:00
Alexander Langer
27d19e4e41
mdoc style cleanup.
...
Reviewed by: sheldonh
2000-06-26 14:44:31 +00:00
Ruslan Ermilov
dc1a022582
Remove ``pptpalias'' since this is now done transparently by libalias(3).
2000-06-20 12:52:27 +00:00
Sheldon Hearn
3de0a719e7
Fix a small grammar nit, with the maintainer's implicit approval.
2000-05-22 08:41:57 +00:00
Ruslan Ermilov
11c2b3bf00
Add new option (-target_addr) to control how to deal with incoming packets
...
not associated with any pre-existing link.
Submitted by: brian
2000-05-18 10:31:10 +00:00
Ruslan Ermilov
4330006d9e
New option: -redirect_proto.
2000-05-03 15:06:45 +00:00
Ruslan Ermilov
bd69051080
Load Sharing using IP Network Address Translation (RFC 2391, LSNAT).
2000-04-27 17:55:17 +00:00
Brian Somers
7ffac027b3
Correct Charles Mott's email address
...
Requested by: cmott@scientech.com
2000-04-02 20:23:34 +00:00
Sheldon Hearn
ef8f7ac935
Remove single-space hard sentence breaks. These degrade the quality
...
of the typeset output, tend to make diffs harder to read and provide
bad examples for new-comers to mdoc.
2000-03-01 11:27:47 +00:00
Brian Somers
a786a19657
Suggest ppp -nat, not ppp -alias
2000-02-26 13:13:16 +00:00
Mike Pritchard
2522bece25
Minor grammar fix.
1999-10-30 19:33:41 +00:00
Ruslan Ermilov
04bf7dcfeb
Fixed the description of how packets re-enter IP firewall filter.
...
Suggested by: Ari Suutari <ari@suutari.iki.fi>
1999-10-06 09:26:39 +00:00
Ruslan Ermilov
2e7e7c71ef
Config file parser changes:
...
- Trailing spaces and empty lines are ignored.
- A `#' sign will mark the remaining of the line as a comment.
Reviewed by: Ari Suutari <ari@suutari.iki.fi>
1999-09-07 15:34:12 +00:00
Peter Wemm
7f3dea244c
$Id$ -> $FreeBSD$
1999-08-28 00:22:10 +00:00
Chris Costello
a7d1f49705
Bad cross-reference of getservbyname(2) changed to getservbyname(3)
...
Reviewed by: ru
1999-08-18 01:20:07 +00:00
Ruslan Ermilov
7591275ecb
Back out previous commit.
1999-07-28 08:38:26 +00:00
Brian Somers
6664883843
Mention that data going from one internal address to another will
...
not be processed by natd.
Requested by: Ludwig Pummer <ludwigp@bigfoot.com>
1999-06-21 07:58:25 +00:00
Brian Somers
9c501140f7
/sbin/natd portrange documentation and bugfix
...
Submitted by: Ruslan Ermilov <ru@ucb.crimea.ua>
PR: 11690
3.2 candidate ?
1999-05-13 16:58:31 +00:00
Eivind Eklund
26b4eff640
Add a comment that natd is made for use with NICs, not PPP links - I'm
...
tired of the five people each day that ask me how to set up natd for
use with PPP.
1999-04-08 23:15:31 +00:00
Brian Somers
59a7c61374
Upgrade (almost) to natd 2.0b1
...
- Transparent proxy support.
- PERMANENT_LINK IS NOW OBSOLETE, use redirect_port instead.
- Drop support for early FreeBSD 2.2 versions
- If separate input & output sockets are being used
use them to find out packet direction instead of
normal mechanism. This can be handy in complex environments
with multiple interfaces.
- PPTP redirect support by Dru Nelson <dnelson@redwoodsoft.com> added.
- Logging enhancements from Martin Machacek <mm@i.cz> added.
Obtained from: Ari Suutari <ari@suutari.iki.fi>
1999-03-07 18:23:56 +00:00