diff options
Diffstat (limited to 'contrib/ipfilter/man/ipfilter.4')
| -rw-r--r-- | contrib/ipfilter/man/ipfilter.4 | 18 |
1 files changed, 9 insertions, 9 deletions
diff --git a/contrib/ipfilter/man/ipfilter.4 b/contrib/ipfilter/man/ipfilter.4 index 09eb4db..10fd18e 100644 --- a/contrib/ipfilter/man/ipfilter.4 +++ b/contrib/ipfilter/man/ipfilter.4 @@ -28,7 +28,7 @@ send back an ICMP error/TCP reset for blocked packets .IP keep packet state information for TCP, UDP and ICMP packet flows .IP -keep fragment state information for any IP packet, applying the same rule +keep fragment state information for any IP packet, applying the same rule to all fragments. .IP act as a Network Address Translator (NAT) @@ -53,7 +53,7 @@ On any arbitrary combination of TCP flags .IP "short" (fragmented) IP packets with incomplete headers can be filtered .IP -any of the 19 IP options or 8 registered IP security classes TOS (Type of +any of the 19 IP options or 8 registered IP security classes TOS (Type of Service) field in packets .PP To keep track of the performance of the IP packet filter, a logging device @@ -73,12 +73,12 @@ it matches a rule setup to look for suspicious packets .PP IP Filter keeps its own set of statistics on: .IP -packets blocked +packets blocked .IP packets (and bytes!) used for accounting .IP packets passed -.lP +.IP packets logged .IP attempts to log which failed (buffer full) @@ -87,7 +87,7 @@ and much more, for packets going both in and out. .SH Tools The current implementation provides a small set of tools, which can easily -be used and integrated with regular unix shells and tools. A brief description +be used and integrated with regular unix shells and tools. A brief description of the tools provided: .PP ipf(8) @@ -100,7 +100,7 @@ ipfs(8) is a utility to temporarily lock the IP Filter kernel tables (state tables and NAT mappings) and write them to disk. After that the system can be rebooted, and ipfs can be used to read these tables from disk and restore -them into the kernel. This way the system can be rebooted without the +them into the kernel. This way the system can be rebooted without the connections being terminated. .PP ipfstat(8) @@ -117,7 +117,7 @@ ipmon(8) reads buffered data from the logging device (default is /dev/ipl) for output to either: .IP -screen (standard output) +screen (standard output) .IP file .IP @@ -147,13 +147,13 @@ documented in ipf(4). Documentation on ioctl's and the format of data saved to the logging character device is provided in ipl(4) -so that you may develop your own applications to work with or in place of any +so that you may develop your own applications to work with or in place of any of the above. Similar, the interface to the NAT code is documented in ipnat(4). .SH PACKET PROCESSING FLOW -The following diagram illustrates the flow of TCP/IP packets through the +The following diagram illustrates the flow of TCP/IP packets through the various stages introduced by IP Filter. .PP .nf |
