summaryrefslogtreecommitdiffstats
path: root/usr.sbin/ppp/ppp.8
diff options
context:
space:
mode:
authorbrian <brian@FreeBSD.org>2000-11-16 21:50:50 +0000
committerbrian <brian@FreeBSD.org>2000-11-16 21:50:50 +0000
commit732fe3d14425e47aefee6a51b510b416c37039a7 (patch)
tree6616f1cff806550052cce616352e1f8de35025b3 /usr.sbin/ppp/ppp.8
parentc87c13134f58e8c43d88548733164d19b7bf0fcb (diff)
downloadFreeBSD-src-732fe3d14425e47aefee6a51b510b416c37039a7.zip
FreeBSD-src-732fe3d14425e47aefee6a51b510b416c37039a7.tar.gz
Be a bit more precise about what ``nat deny_incoming yes'' does.
Diffstat (limited to 'usr.sbin/ppp/ppp.8')
-rw-r--r--usr.sbin/ppp/ppp.823
1 files changed, 18 insertions, 5 deletions
diff --git a/usr.sbin/ppp/ppp.8 b/usr.sbin/ppp/ppp.8
index 50f2aaa..66463f4 100644
--- a/usr.sbin/ppp/ppp.8
+++ b/usr.sbin/ppp/ppp.8
@@ -3165,11 +3165,24 @@ to be redirected to
It is useful if you own a small number of real IP numbers that
you wish to map to specific machines behind your gateway.
.It nat deny_incoming yes|no
-If set to yes, this command will refuse all incoming connections
-by dropping the packets in much the same way as a firewall would.
-.Pp
-It should be noted that enabling this option also drops IP packets
-that cannot be identified by libalias. This will be fixed in the future.
+If set to yes, this command will refuse all incoming packets where an
+aliasing link doesn't already exist.
+Refer to the
+.Sx CONCEPTUAL BACKGROUND
+section of
+.Xr libalias 3
+for a description of what an
+.Dq aliasing link
+is.
+.Pp
+It should be noted under what circumstances an aliasing link is created by
+.Xr libalias 3 .
+It may be necessary to further protect your network from outside
+connections using the
+.Dq set filter
+or
+.Dq nat target
+commands.
.It nat help|?
This command gives a summary of available nat commands.
.It nat log yes|no
OpenPOWER on IntegriCloud