diff options
| author | phk <phk@FreeBSD.org> | 1996-02-13 15:20:20 +0000 |
|---|---|---|
| committer | phk <phk@FreeBSD.org> | 1996-02-13 15:20:20 +0000 |
| commit | 028a23209c932a0295a0c4c30ac1a5121b4c27b8 (patch) | |
| tree | f83cb4ec8fcb6e467191f553708af2c9ce68e000 | |
| parent | 05ba9bfe8b06af9502b552c95b3654d668d62566 (diff) | |
| download | FreeBSD-src-028a23209c932a0295a0c4c30ac1a5121b4c27b8.zip FreeBSD-src-028a23209c932a0295a0c4c30ac1a5121b4c27b8.tar.gz | |
Document that the firewall will no longer reorder the rules.
| -rw-r--r-- | sbin/ipfw/ipfw.8 | 11 |
1 files changed, 8 insertions, 3 deletions
diff --git a/sbin/ipfw/ipfw.8 b/sbin/ipfw/ipfw.8 index b191824..3b407a9 100644 --- a/sbin/ipfw/ipfw.8 +++ b/sbin/ipfw/ipfw.8 @@ -284,9 +284,14 @@ Currently there is no method for filtering out specific types of ICMP packets. Either you don't filter ICMP at all, or all ICMP packets are filtered. .Pp -The system has a rule weighting system for the firewall chain. This -means that rules are not used in the order that they are specified. To -see what rule ordering is used, use the +The system has an optional rule weighting system for the firewall chain. +This means that rules are not used in the order that they are specified. +To enable this feature, you need to recompile your kernel, see the +.I LINT +configuration for details. +In general you do not want that. +.Pp +To see what rule ordering is used, use the .Em list command. .Pp |
