summaryrefslogtreecommitdiffstats
path: root/sbin/ipfw/ipfw.8
diff options
context:
space:
mode:
Diffstat (limited to 'sbin/ipfw/ipfw.8')
-rw-r--r--sbin/ipfw/ipfw.86
1 files changed, 6 insertions, 0 deletions
diff --git a/sbin/ipfw/ipfw.8 b/sbin/ipfw/ipfw.8
index 6875c94..40fb582 100644
--- a/sbin/ipfw/ipfw.8
+++ b/sbin/ipfw/ipfw.8
@@ -511,6 +511,11 @@ ipfw flush
.Ed
.Pp
in similar surroundings is also a bad idea.
+.Pp
+The IP filter list may not be modified if the system security level
+is set to 3 or higher (see
+.Xr init 8
+for information on system security levels).
.Sh PACKET DIVERSION
A divert socket bound to the specified port will receive all packets diverted
to that port; see
@@ -551,6 +556,7 @@ This rule diverts all incoming packets from 192.168.2.0/24 to divert port 5000:
.Xr ipfirewall 4 ,
.Xr protocols 5 ,
.Xr services 5 ,
+.Xr init 8 ,
.Xr reboot 8 ,
.Xr sysctl 8 ,
.Xr syslogd 8
OpenPOWER on IntegriCloud