diff options
author | keramida <keramida@FreeBSD.org> | 2006-10-04 19:29:05 +0000 |
---|---|---|
committer | keramida <keramida@FreeBSD.org> | 2006-10-04 19:29:05 +0000 |
commit | 58ae44274d6d518dce53999a796721f8bc131404 (patch) | |
tree | 4924d742c635f01f77c29a4b70d55cdd69dbbcc4 /sbin/ipfw | |
parent | bcfb48e2eb5e6a01dcf8f984368d5c5dff75375e (diff) | |
download | FreeBSD-src-58ae44274d6d518dce53999a796721f8bc131404.zip FreeBSD-src-58ae44274d6d518dce53999a796721f8bc131404.tar.gz |
When addr/mask examples are given, show both a host and network
address, to avoid confusing the users that a full address is
always required.
Submitted by: Josh Paetzel <josh@tcbug.org> (through freebsd-doc)
MFC after: 3 days
Diffstat (limited to 'sbin/ipfw')
-rw-r--r-- | sbin/ipfw/ipfw.8 | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/sbin/ipfw/ipfw.8 b/sbin/ipfw/ipfw.8 index 4efef72..d8c2bc5 100644 --- a/sbin/ipfw/ipfw.8 +++ b/sbin/ipfw/ipfw.8 @@ -951,20 +951,20 @@ Hostnames are resolved at the time the rule is added to the firewall list. .It Ar addr Ns / Ns Ar masklen Matches all addresses with base .Ar addr -(specified as an IP address or a hostname) +(specified as an IP address, a network number, or a hostname) and mask width of .Cm masklen bits. -As an example, 1.2.3.4/25 will match +As an example, 1.2.3.4/25 or 1.2.3.0/25 will match all IP numbers from 1.2.3.0 to 1.2.3.127 . .It Ar addr Ns : Ns Ar mask Matches all addresses with base .Ar addr -(specified as an IP address or a hostname) +(specified as an IP address, a network number, or a hostname) and the mask of .Ar mask , specified as a dotted quad. -As an example, 1.2.3.4:255.0.255.0 will match +As an example, 1.2.3.4:255.0.255.0 or 1.0.3.0:255.0.255.0 will match 1.*.3.*. This form is advised only for non-contiguous masks. @@ -977,7 +977,7 @@ error-prone. .It Ar list : Bro Ar num | num-num Brc Ns Op Ns , Ns Ar list Matches all addresses with base address .Ar addr -(specified as an IP address or a hostname) +(specified as an IP address, a network number, or a hostname) and whose last byte is in the list between braces { } . Note that there must be no spaces between braces and numbers (spaces after commas are allowed). @@ -997,6 +997,7 @@ bitmask, it takes constant time and dramatically reduces the complexity of rulesets. .br As an example, an address specified as 1.2.3.4/24{128,35-55,89} +or 1.2.3.0/24{128,35-55,89} will match the following IP addresses: .br 1.2.3.128, 1.2.3.35 to 1.2.3.55, 1.2.3.89 . |