summaryrefslogtreecommitdiffstats
path: root/sbin/ipfw
diff options
context:
space:
mode:
authorru <ru@FreeBSD.org>2002-01-10 15:41:06 +0000
committerru <ru@FreeBSD.org>2002-01-10 15:41:06 +0000
commitffe4658ba91c9947d7fd39b75cd4c0dc9221491b (patch)
tree3de2335c6bd863d19373077604aa35f5bc26713c /sbin/ipfw
parenta70f7fff62506c6d2af51e9de1eda6d2b1d28b6a (diff)
downloadFreeBSD-src-ffe4658ba91c9947d7fd39b75cd4c0dc9221491b.zip
FreeBSD-src-ffe4658ba91c9947d7fd39b75cd4c0dc9221491b.tar.gz
mdoc(7) police: tidy up the markup in revision 1.96.
Diffstat (limited to 'sbin/ipfw')
-rw-r--r--sbin/ipfw/ipfw.817
1 files changed, 12 insertions, 5 deletions
diff --git a/sbin/ipfw/ipfw.8 b/sbin/ipfw/ipfw.8
index b465609..6966a74 100644
--- a/sbin/ipfw/ipfw.8
+++ b/sbin/ipfw/ipfw.8
@@ -376,7 +376,9 @@ is not a directly-reachable address, the route as found in
the local routing table for that IP is used instead.
If
.Ar ipaddr
-is a local address, then on a packet matching a fwd rule,
+is a local address, then on a packet matching a
+.Cm fwd
+rule,
it will be diverted to
.Ar port
on the local machine, keeping the local address of the socket
@@ -395,10 +397,15 @@ packet is used, so that a packet for an external machine port
Y would be forwarded to local port Y.
The kernel must have been compiled with the
.Dv IPFIREWALL_FORWARD
-option. Bridging interferes with forwarding of packets not destined
-to the local system as they bypass ip_input() and ip_output() where
-forwarding is implimented. The
-.Ar fwd
+option.
+Bridging interferes with forwarding of packets not destined
+to the local system as they bypass
+.Fn ip_input
+and
+.Fn ip_output
+where forwarding is implemented.
+The
+.Cm fwd
action does not change the contents of the packet at all so
packets forwarded to another system will usually be rejected by that system
unless there is a matching rule on that system to capture them.
OpenPOWER on IntegriCloud