Import version 3.2alpha7

4 files changed, 20 insertions, 4 deletions

diff --git a/contrib/ipfilter/man/ipf.1 b/contrib/ipfilter/man/ipf.1
index 912d7ef..5ea06fa 100644
--- a/contrib/ipfilter/man/ipf.1
+++ b/contrib/ipfilter/man/ipf.1
@@ -99,7 +99,7 @@ Zero global statistics held in the kernel for filtering only (this doesn't
 affect fragment or state statistics).
 .DT
 .SH SEE ALSO
-ipfstat(1), ipftest(1), ipf(5)
+ipfstat(1), ipftest(1), ipf(5), mkfilters(1)
 .SH DIAGNOSTICS
 .PP
 Needs to be run as root for the packet filtering lists to actually
diff --git a/contrib/ipfilter/man/ipf.5 b/contrib/ipfilter/man/ipf.5
index 417a0ea..f8ceedd 100644
--- a/contrib/ipfilter/man/ipf.5
+++ b/contrib/ipfilter/man/ipf.5
@@ -277,7 +277,10 @@ packets from both protocols are compared. This is equivalent to "proto
 tcp/udp".  When composing \fBport\fP comparisons, either the service
 name or an integer port number may be used. Port comparisons may be
 done in a number of forms, with a number of comparison operators, or
-port ranges may be specified. See the examples for more information.
+port ranges may be specified. When the port appears as part of the
+\fBfrom\fP object, it matches the source port number, when it appears
+as part of the \fBto\fP object, it matches the destination port number.
+See the examples for more information.
 .PP
 The \fBall\fP keyword is essentially a synonym for "from any to any"
 with no other match parameters.
@@ -430,4 +433,4 @@ would be needed before the first block.
 .br
 /etc/hosts
 .SH SEE ALSO
-ipf(1), ipftest(1)
+ipf(1), ipftest(1), mkfilters(1)
diff --git a/contrib/ipfilter/man/ipfilter.5 b/contrib/ipfilter/man/ipfilter.5
index 03a87a5..40175e4 100644
--- a/contrib/ipfilter/man/ipfilter.5
+++ b/contrib/ipfilter/man/ipfilter.5
@@ -4,4 +4,4 @@ IP FIlter
 .SH DESCRIPTION
 .PP
 .SH SEE ALSO
-ipf(1), ipf(1), ipf(5), ipnat(1), ipnat(5)
+ipf(1), ipf(1), ipf(5), ipnat(1), ipnat(5), mkfilters(1)
diff --git a/contrib/ipfilter/man/mkfilters.1 b/contrib/ipfilter/man/mkfilters.1
new file mode 100644
index 0000000..e55054c
--- /dev/null
+++ b/contrib/ipfilter/man/mkfilters.1
@@ -0,0 +1,13 @@
+.TH IPF 1
+.SH NAME
+mkfilters \- generate a minimal firewall ruleset for ipfilter
+.SH SYNOPSIS
+.B mkfilters
+.SH DESCRIPTION
+.PP
+\fBmkfilters\fP is a perl script that generates a minimal filter rule set for
+use with \fBipfilter\fP by parsing the output of \fBifconfig\fP.
+.DT
+.SH SEE ALSO
+ipf(1), ipf(5), ipfilter(5), ifconfig(8)
+