diff options
Diffstat (limited to 'release/doc/en_US.ISO8859-1/relnotes/article.sgml')
-rw-r--r-- | release/doc/en_US.ISO8859-1/relnotes/article.sgml | 20 |
1 files changed, 17 insertions, 3 deletions
diff --git a/release/doc/en_US.ISO8859-1/relnotes/article.sgml b/release/doc/en_US.ISO8859-1/relnotes/article.sgml index 393215a..1787d21 100644 --- a/release/doc/en_US.ISO8859-1/relnotes/article.sgml +++ b/release/doc/en_US.ISO8859-1/relnotes/article.sgml @@ -178,7 +178,15 @@ <sect3 id="net-proto"> <title>Network Protocols</title> - <para>&man.ipfw.4; rules now support C++-style comment.</para> + <para>&man.ipfw.4; rules now support comma-separated address lists + (like <literal>1.2.3.4, 5.6.7.8/30, 9.10.11.12/22</literal>), + and allows spaces after commas to make lists of addresses more readable. + &merged;</para> + + <para>&man.ipfw.4; rules now support C++-style comment. + The comment is stored together with the rule and appears using + &man.ipfw.8; <literal>show</literal> command. + &merged;</para> <para>&man.ipfw.8; now allows to modify &man.ipfw.4; rules in set 31, which was read-only and used for the default rules. @@ -186,7 +194,8 @@ command but are not deleted by <command>ipfw flush</command> command. So this implements a flexible form of <quote>persistent - rules</quote>. More details can be found in &man.ipfw.8;.</para> + rules</quote>. More details can be found in &man.ipfw.8;. + &merged;</para> <para>To reduce information leakage, IPv4 packets no longer have a <varname>ip_id</varname> field set unless fragmentation is @@ -246,7 +255,12 @@ presence of devfs, and has been removed.</para> <para>&man.ipfw.8; <literal>list</literal> and <literal>show</literal> - command now support ranges of rule numbers.</para> + command now support ranges of rule numbers. + &merged;</para> + + <para>&man.ipfw.8; now supports <option>-n</option> flag + to test the syntax of commands without actually changing anything. + &merged;</para> <para>The <filename>libcipher</filename> DES cryptography library has been removed. All of its functionality is provided by the |