diff options
author | oleg <oleg@FreeBSD.org> | 2006-06-15 09:39:22 +0000 |
---|---|---|
committer | oleg <oleg@FreeBSD.org> | 2006-06-15 09:39:22 +0000 |
commit | 7a65db868d2dd50e0b00551e66f65f991130d187 (patch) | |
tree | e0ceace24ee6812b8ba9aacd9913b87c088d5493 /sbin/ipfw/ipfw.8 | |
parent | 45f57ec2f17004811352063e238f34b1cecf3c09 (diff) | |
download | FreeBSD-src-7a65db868d2dd50e0b00551e66f65f991130d187.zip FreeBSD-src-7a65db868d2dd50e0b00551e66f65f991130d187.tar.gz |
Add support of 'tablearg' feature for:
- 'tag' & 'untag' action parameters.
- 'tagged' & 'limit' rule options.
Rule examples:
pipe 1 tag tablearg ip from table(1) to any
allow ip from any to table(2) tagged tablearg
allow tcp from table(3) to any 25 setup limit src-addr tablearg
sbin/ipfw/ipfw2.c:
1) new macros
GET_UINT_ARG - support of 'tablearg' keyword, argument range checking.
PRINT_UINT_ARG - support of 'tablearg' keyword.
2) strtoport(): do not silently truncate/accept invalid port list expressions
like: '1,2-abc' or '1,2-3-4' or '1,2-3x4'. style(9) cleanup.
Approved by: glebius (mentor)
MFC after: 1 month
Diffstat (limited to 'sbin/ipfw/ipfw.8')
-rw-r--r-- | sbin/ipfw/ipfw.8 | 10 |
1 files changed, 7 insertions, 3 deletions
diff --git a/sbin/ipfw/ipfw.8 b/sbin/ipfw/ipfw.8 index 2011dd2..9183b2a 100644 --- a/sbin/ipfw/ipfw.8 +++ b/sbin/ipfw/ipfw.8 @@ -1,7 +1,7 @@ .\" .\" $FreeBSD$ .\" -.Dd May 24, 2006 +.Dd June 15, 2006 .Dt IPFW 8 .Os .Sh NAME @@ -1587,12 +1587,16 @@ Lookup tables currently support IPv4 addresses only. The .Cm tablearg feature provides the ability to use a value, looked up in the table, as -the argument for a rule action. +the argument for a rule action, action parameter or rule option. This can significantly reduce number of rules in some configurations. The .Cm tablearg argument can be used with the following actions: -.Cm pipe , queue, divert, tee, netgraph, ngtee . +.Cm pipe , queue, divert, tee, netgraph, ngtee, +action parameters: +.Cm tag, untag, +rule options: +.Cm limit, tagged. See the .Sx EXAMPLES Section for example usage of tables and the tablearg keyword. |