Minor changes. Note that the ICMP code will either send a host unreachable

or port unreachable as appropriate.
This commit is contained in:
Gary Palmer 1995-11-01 00:42:17 +00:00
parent bf66fd8815
commit 6c680b8484

View File

@ -1,4 +1,4 @@
<!-- $Id$ -->
<!-- $Id: firewalls.sgml,v 1.1 1995/10/14 21:49:45 jfieber Exp $ -->
<!-- The FreeBSD Documentation Project -->
<sect><heading>Firewalls<label id="firewalls"></heading>
@ -133,7 +133,7 @@ relevant to IPFW:
filtering.
<tag/options IPFIREWALL_VERBOSE/ Enables code to allow logging of
packets through <tt>syslogd</tt>. Without this option, even if you
packets through <tt>syslogd(8)</tt>. Without this option, even if you
specify that packets should be logged in the filter rules, nothing
will happen.
@ -210,8 +210,8 @@ entry is destined for. For the firewall chain, valid
<descrip>
<tag/reject/Drop the packet, and send an ICMP HOST_UNREACHABLE packet
to the source.
<tag/reject/Drop the packet, and send an ICMP HOST_UNREACHABLE or
ICMP PORT_UNREACHABLE (as appropriate) packet to the source.
<tag/lreject/As <bf>reject</bf>, but also log the packet details.