Minor changes. Note that the ICMP code will either send a host unreachable
or port unreachable as appropriate.
This commit is contained in:
parent
bf66fd8815
commit
6c680b8484
@ -1,4 +1,4 @@
|
||||
<!-- $Id$ -->
|
||||
<!-- $Id: firewalls.sgml,v 1.1 1995/10/14 21:49:45 jfieber Exp $ -->
|
||||
<!-- The FreeBSD Documentation Project -->
|
||||
|
||||
<sect><heading>Firewalls<label id="firewalls"></heading>
|
||||
@ -133,7 +133,7 @@ relevant to IPFW:
|
||||
filtering.
|
||||
|
||||
<tag/options IPFIREWALL_VERBOSE/ Enables code to allow logging of
|
||||
packets through <tt>syslogd</tt>. Without this option, even if you
|
||||
packets through <tt>syslogd(8)</tt>. Without this option, even if you
|
||||
specify that packets should be logged in the filter rules, nothing
|
||||
will happen.
|
||||
|
||||
@ -210,8 +210,8 @@ entry is destined for. For the firewall chain, valid
|
||||
|
||||
<descrip>
|
||||
|
||||
<tag/reject/Drop the packet, and send an ICMP HOST_UNREACHABLE packet
|
||||
to the source.
|
||||
<tag/reject/Drop the packet, and send an ICMP HOST_UNREACHABLE or
|
||||
ICMP PORT_UNREACHABLE (as appropriate) packet to the source.
|
||||
|
||||
<tag/lreject/As <bf>reject</bf>, but also log the packet details.
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user