d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
5a155b405e
freebsd-skq/sbin
History
Luigi Rizzo 5a155b405e One more (hopefully the last one) step in cleaning up the syntax, 
following Julian's good suggestion: since you can specify any match
pattern as an option, rules now have the following format:

	[<proto> from <src> to <dst>] [options]

i.e. the first part is now entirely optional (and left there just
for compatibility with ipfw1 rulesets).

Add a "-c" flag to show/list rules in the compact form
(i.e. without the "ip from any to any" part) when possible.
The default is to include it so that scripts processing ipfw's
canonical output will still work.
Note that as part of this cleanup (and to remove ambiguity), MAC
fields now can only be specified in the options part.

Update the manpage to reflect the syntax.

Clarify the behaviour when a match is attempted on fields which
are not present in the packet, e.g. port numbers on non TCP/UDP
packets, and the "not" operator is specified. E.g.

	ipfw add allow not src-port 80

will match also ICMP packets because they do not have port numbers, so
"src-port 80" will fail and "not src-port 80" will succeed. For such
cases it is advised to insert further options to prevent undesired results
(e.g. in the case above, "ipfw add allow proto tcp not src-port 80").

We definitely need to rewrite the parser using lex and yacc!
2002-08-19 12:36:54 +00:00
..
adjkerntz The .Nm utility 2002-07-06 19:34:18 +00:00
atacontrol mdoc(7) police: kill hard sentence break. 2002-08-13 11:29:42 +00:00
atm The .Nm utility 2002-07-06 19:34:18 +00:00
badsect The .Nm utility 2002-07-06 19:34:18 +00:00
bsdlabel Fix more breakage due to FSTYPENAMES/DKTYPENAMES split. 2002-08-16 16:08:36 +00:00
camcontrol Remove unused variable. camcontrol is now WARNS=2 clean on i386. 2002-08-18 21:46:32 +00:00
ccdconfig The .Nm utility 2002-07-06 19:34:18 +00:00
clri The .Nm utility 2002-07-06 19:34:18 +00:00
comcontrol The .Nm utility 2002-07-06 19:34:18 +00:00
conscontrol The .Nm utility 2002-07-06 19:34:18 +00:00
cxconfig
devfs Don't depend on pollution in <machine/limits.h> (by way of 2002-07-29 17:09:21 +00:00
dhclient Removed now unused INTERNALSTATICLIB. 2002-05-13 11:09:07 +00:00
disklabel Fix more breakage due to FSTYPENAMES/DKTYPENAMES split. 2002-08-16 16:08:36 +00:00
dmesg Include <nlist.h> for nlist interfaces instead of depending on namespace 2002-08-18 17:57:08 +00:00
dump Change utimes to set the file creation time (for filesystems that 2002-07-17 02:03:19 +00:00
dumpfs Simplify some things to use libufs-provided functionality here, such as the 2002-08-11 15:38:51 +00:00
dumpon Improve wording even more. 2002-08-13 11:39:38 +00:00
fdisk Fixed some print format errors. Avoid some warnings about possible 2002-07-16 23:18:29 +00:00
fdisk_pc98 The .Nm utility 2002-07-06 19:34:18 +00:00
ffsinfo mdoc(7) police: nits. 2002-05-29 16:47:55 +00:00
fsck The .Nm utility 2002-07-06 19:34:18 +00:00
fsck_ffs Fix more breakage due to FSTYPENAMES/DKTYPENAMES split. 2002-08-16 16:08:36 +00:00
fsck_msdosfs mdoc(7) police: Use the .Ud macro. 2002-08-13 11:47:56 +00:00
fsdb Warning cleanup. 2002-07-30 13:01:25 +00:00
fsirand mdoc(7) police: Removed redundant .Ns calls. 2002-08-13 16:07:28 +00:00
gpt Grab a snapshot of Marcel's gpt tool. This is still a work-in-progress 2002-07-20 19:27:43 +00:00
growfs can not -> cannot. 2002-08-13 14:10:36 +00:00
ifconfig Fix last-minute typo which breaks the world. 2002-08-19 08:59:20 +00:00
init can not -> cannot. 2002-08-13 14:10:36 +00:00
ip6fw The .Nm utility 2002-07-06 19:34:18 +00:00
ipf
ipfs
ipfstat
ipfw One more (hopefully the last one) step in cleaning up the syntax, 2002-08-19 12:36:54 +00:00
ipmon
ipnat
kldconfig The .Nm utility 2002-07-06 19:34:18 +00:00
kldload The .Nm utility 2002-07-06 19:34:18 +00:00
kldstat The .Nm utility 2002-07-06 19:34:18 +00:00
kldunload The .Nm utility 2002-07-06 19:34:18 +00:00
ldconfig Clarify the explanation of the behavior for setuid programs by 2002-08-18 18:11:38 +00:00
mca Grab a snapshot of Marcel's WIP ia64 machine check decoder. 2002-07-20 19:31:11 +00:00
md5
mdconfig Replace extra call to "tunefs" with the equivalent of "newfs -U". 2002-07-15 11:30:21 +00:00
mdmfs The .Nm utility 2002-07-06 19:34:18 +00:00
mknod The .Nm utility 2002-07-06 19:34:18 +00:00
mount mdoc(7) police: missing markup bits. 2002-08-13 12:03:35 +00:00
mount_cd9660 This should have been committed too, I have no idea 2002-08-03 17:05:14 +00:00
mount_ext2fs Don't depend on namespace pollution in sys/mount.h and 2002-08-13 16:07:39 +00:00
mount_hpfs Now that the kernel is able to load modules itself, 2002-08-03 16:03:21 +00:00
mount_msdosfs Now that the kernel is able to load modules itself, 2002-08-03 16:03:21 +00:00
mount_nfs Fix -o ac(reg|dir)(min|max) options. The appropriate flags weren't 2002-08-06 20:26:30 +00:00
mount_ntfs Now that the kernel is able to load modules itself, 2002-08-03 16:03:21 +00:00
mount_nullfs Don't depend on namespace pollution in sys/mount.h and 2002-08-13 16:07:39 +00:00
mount_nwfs Now that the kernel is able to load modules itself, 2002-08-03 16:03:21 +00:00
mount_portalfs Now that the kernel is able to load modules itself, 2002-08-03 16:03:21 +00:00
mount_smbfs
mount_std Update manpage to match the code, we don't use 2002-08-11 15:18:41 +00:00
mount_udf Don't depend on namespace pollution in sys/mount.h and 2002-08-13 16:07:39 +00:00
mount_umapfs Now that the kernel is able to load modules itself, 2002-08-03 16:03:21 +00:00
mount_unionfs Don't depend on namespace pollution in sys/mount.h and 2002-08-13 16:07:39 +00:00
natd can not -> cannot. 2002-08-13 14:10:36 +00:00
newfs mdoc(7) police: Consistently name options' arguments in the SYNOPSIS and DESCRIPTION sections.. 2002-08-13 13:13:20 +00:00
newfs_msdos The .Nm utility 2002-07-06 19:34:18 +00:00
nfsiod No need to include sys/time.h, this unbreaks a c89 warning about long long 2002-08-16 08:19:15 +00:00
nologin The .Nm utility 2002-07-06 19:34:18 +00:00
nos-tun The .Nm utility 2002-07-06 19:34:18 +00:00
ping Fix the broken "avoid unaligned data" fix. The problem is that the builtin 2002-08-10 03:00:55 +00:00
ping6 Don't explicit kill of the process' own pid. 2002-07-07 18:19:48 +00:00
quotacheck Fixup preen.c to match its new residence. 2002-08-09 16:25:32 +00:00
rcorder The .Nm utility. Add FreeBSD Id. 2002-07-06 19:34:37 +00:00
reboot The .Nm utility. 2002-07-06 19:35:14 +00:00
restore Change utimes to set the file creation time (for filesystems that 2002-07-17 02:03:19 +00:00
route The .Nm utility. 2002-07-06 19:35:14 +00:00
routed The .Nm utility. 2002-07-06 19:35:14 +00:00
rtsol
savecore The .Nm utility. 2002-07-06 19:35:14 +00:00
setkey Fix spacing for -P (policy) examples. 2002-07-27 21:06:06 +00:00
shutdown The .Nm utility. 2002-07-06 19:35:14 +00:00
slattach The .Nm utility. 2002-07-06 19:35:14 +00:00
spppcontrol
startslip
swapon The .Nm utility. 2002-07-06 19:35:14 +00:00
sysctl The .Nm utility. 2002-07-06 19:35:14 +00:00
tunefs mdoc(7) police: laundry. 2002-08-13 13:31:54 +00:00
umount - Introduce a new struct xvfsconf, the userland version of struct vfsconf. 2002-08-10 20:19:04 +00:00
vinum The .Nm utility. 2002-07-06 19:35:14 +00:00
Makefile Turn nfsiod back on. It is basically now just a sysctl wrapper that also 2002-07-24 22:14:27 +00:00
Makefile.inc