summaryrefslogtreecommitdiffstats
path: root/sbin/ipfw/ipfw.8
diff options
context:
space:
mode:
Diffstat (limited to 'sbin/ipfw/ipfw.8')
-rw-r--r--sbin/ipfw/ipfw.830
1 files changed, 29 insertions, 1 deletions
diff --git a/sbin/ipfw/ipfw.8 b/sbin/ipfw/ipfw.8
index 957d976..7411b8c 100644
--- a/sbin/ipfw/ipfw.8
+++ b/sbin/ipfw/ipfw.8
@@ -8,8 +8,16 @@
.Nm
.Ar file
.Nm ipfw
+.Oo
+.Fl f
+|
+.Fl q
+.Oc
flush
.Nm ipfw
+.Oo
+.Fl q
+.Oc
zero
.Op Ar number
.Nm ipfw
@@ -19,6 +27,14 @@ delete
.Op Fl aftN
list
.Nm ipfw
+.Oo
+.Fl ftN
+.Oc
+show
+.Nm ipfw
+.Oo
+.Fl q
+.Oc
add
.Op Ar number
.Ar action
@@ -61,6 +77,8 @@ if any.
.Pp
The list command prints out the current rule set.
.Pp
+The show command is equivalent to `ipfw -a list'.
+.Pp
The zero operation zeroes the counters associated with rule number
.Ar number .
.Pp
@@ -72,7 +90,8 @@ One rule is always present:
.Ed
.Pp
This rule is the default policy, i.e., don't allow anything at all.
-Your job in setting up rules is to modify this policy to match your needs.
+Your job in setting up rules is to modify this policy to match your
+needs.
.Pp
The following options are available:
.Bl -tag -width flag
@@ -84,6 +103,15 @@ Don't ask for confirmation for commands that can cause problems if misused
(ie; flush).
.Ar Note ,
if there is no tty associated with the process, this is implied.
+.It Fl q
+While adding or flushing, be quiet about actions (implies '-f'). This is
+useful for adjusting rules by executing multiple ipfw commands in a script
+(e.g. sh /etc/rc.firewall), or by processing a file of many ipfw rules,
+across a remote login session. If a flush is performed in normal
+(verbose) mode, it prints a message. Because all rules are flushed, the
+message cannot be delivered to the login session, the login session is
+closed and the remainder of the ruleset is not processed. Access to the
+console is required to recover.
.It Fl t
While listing, show last match timestamp.
.It Fl N
OpenPOWER on IntegriCloud