summaryrefslogtreecommitdiffstats
path: root/sbin/ipfw
diff options
context:
space:
mode:
authorru <ru@FreeBSD.org>2001-08-07 15:48:51 +0000
committerru <ru@FreeBSD.org>2001-08-07 15:48:51 +0000
commit43457588767caedd16dbf19162de0a6a435dfeda (patch)
tree0505e005ecc9492a4b759dc8e06eb138613e4aa4 /sbin/ipfw
parent6b00d6a3ebd552afe7b0a0844e598ee70810f887 (diff)
downloadFreeBSD-src-43457588767caedd16dbf19162de0a6a435dfeda.zip
FreeBSD-src-43457588767caedd16dbf19162de0a6a435dfeda.tar.gz
mdoc(7) police:
Avoid using parenthesis enclosure macros (.Pq and .Po/.Pc) with plain text. Not only this slows down the mdoc(7) processing significantly, but it also has an undesired (in this case) effect of disabling hyphenation within the entire enclosed block.
Diffstat (limited to 'sbin/ipfw')
-rw-r--r--sbin/ipfw/ipfw.834
1 files changed, 12 insertions, 22 deletions
diff --git a/sbin/ipfw/ipfw.8 b/sbin/ipfw/ipfw.8
index 29f61e4..16f2873 100644
--- a/sbin/ipfw/ipfw.8
+++ b/sbin/ipfw/ipfw.8
@@ -173,17 +173,13 @@ While
or
.Cm flush Ns ing ,
be quiet about actions
-.Po
-implies
-.Fl f
-.Pc .
+(implies
+.Fl f ) .
This is useful for adjusting rules by executing multiple
.Nm
commands in a script
-.Po
-e.g.,
-.Ql sh\ /etc/rc.firewall
-.Pc ,
+(e.g.,
+.Ql sh\ /etc/rc.firewall ) ,
or by processing a file of many
.Nm
rules,
@@ -312,10 +308,8 @@ A match is only declared with the specified probability
(floating point number between 0 and 1).
This can be useful for a number of applications such as
random packet drop or
-.Po
-in conjunction with
-.Xr dummynet 4
-.Pc
+(in conjunction with
+.Xr dummynet 4 )
to simulate the effect of multiple paths leading to out-of-order
packet delivery.
.It Ar action :
@@ -335,7 +329,7 @@ The search terminates.
is an alias for
.Cm deny .
.It Cm reject
-.Pq Deprecated .
+(Deprecated).
Discard packets that match this rule, and try to send an ICMP
host unreachable notice.
The search terminates.
@@ -382,11 +376,9 @@ Send a copy of packets matching this rule to the
socket bound to port
.Ar port .
The search terminates and the original packet is accepted
-.Po
-but see section
+(but see section
.Sx BUGS
-below
-.Pc .
+below).
.It Cm fwd Ar ipaddr Ns Xo
.Op , Ns Ar port
.Xc
@@ -1110,11 +1102,9 @@ The
.Nm
filter list may not be modified if the system security level
is set to 3 or higher
-.Po
-see
+(see
.Xr init 8
-for information on system security levels
-.Pc .
+for information on system security levels).
.El
.Sh PACKET DIVERSION
A
@@ -1159,7 +1149,7 @@ resize it on the fly you will probably have to
and reload the ruleset.
.It Em net.inet.ip.fw.dyn_count : No 3
Current number of dynamic rules
-.Pq read-only .
+(read-only).
.It Em net.inet.ip.fw.dyn_max : No 1000
Maximum number of dynamic rules.
When you hit this limit, no more dynamic rules can be
OpenPOWER on IntegriCloud