diff options
author | gshapiro <gshapiro@FreeBSD.org> | 2001-04-13 01:31:17 +0000 |
---|---|---|
committer | gshapiro <gshapiro@FreeBSD.org> | 2001-04-13 01:31:17 +0000 |
commit | 1e64929334857078402f8d9d2cf000518e8790c1 (patch) | |
tree | 1a29a4309a06aa97064cad1fa16979b5a13b03dc /sbin/ip6fw/ip6fw.8 | |
parent | e767472b727197cefeea3ddb87b7bd0821d673b4 (diff) | |
download | FreeBSD-src-1e64929334857078402f8d9d2cf000518e8790c1.zip FreeBSD-src-1e64929334857078402f8d9d2cf000518e8790c1.tar.gz |
Match ip6fw's command line options to those of ipfw (specifically, added
the ability to use a preprocessor, use the -q (quiet) flag when reading
from a file). The source used is from ipfw.
Clean up exit codes while I am here.
KAME has been informed and plans on integrating these patches into their
own source as well.
Diffstat (limited to 'sbin/ip6fw/ip6fw.8')
-rw-r--r-- | sbin/ip6fw/ip6fw.8 | 53 |
1 files changed, 49 insertions, 4 deletions
diff --git a/sbin/ip6fw/ip6fw.8 b/sbin/ip6fw/ip6fw.8 index 84c1216..7482b19 100644 --- a/sbin/ip6fw/ip6fw.8 +++ b/sbin/ip6fw/ip6fw.8 @@ -9,7 +9,15 @@ .Nd controlling utility for IPv6 firewall .Sh SYNOPSIS .Nm -.Ar file +.Op Fl q +.Oo +.Fl p Ar preproc +.Oo Fl D +.Ar macro Ns Op = Ns Ar value +.Oc +.Op Fl U Ar macro +.Oc +.Ar pathname .Nm .Op Fl f | Fl q flush @@ -42,11 +50,48 @@ to .Op via Ar name | ipv6no .Op Ar options .Sh DESCRIPTION -If used as shown in the first synopsis line, the -.Ar file +To ease configuration, rules can be put into a file which is +processed using +.Nm +as shown in the first synopsis line. +An absolute +.Ar pathname +must be used. +The file will be read line by line and applied as arguments to the .Nm -command. +utility. +.Pp +Optionally, a preprocessor can be specified using +.Fl p Ar preproc +where +.Ar pathname +is to be piped through. +Useful preprocessors include +.Xr cpp 1 +and +.Xr m4 1 . +If +.Ar preproc +doesn't start with a slash +.Pq Ql / +as its first character, the usual +.Ev PATH +name search is performed. +Care should be taken with this in environments where not all +filesystems are mounted (yet) by the time +.Nm +is being run (e.g. when they are mounted over NFS). +Once +.Fl p +has been specified, optional +.Fl D +and +.Fl U +specifications can follow and will be passed on to the preprocessor. +This allows for flexible configuration files (like conditionalizing +them on the local hostname) and the use of macros to centralize +frequently required arguments like IP addresses. .Pp The .Nm |