From fd85b64785483b1b7165ece977583df11da022aa Mon Sep 17 00:00:00 2001 From: se Date: Wed, 24 Jul 2013 08:36:29 +0000 Subject: Remove duplicated parapgraph. MFC after: 3 days --- sbin/ipfw/ipfw.8 | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/sbin/ipfw/ipfw.8 b/sbin/ipfw/ipfw.8 index 2047385..65fa334 100644 --- a/sbin/ipfw/ipfw.8 +++ b/sbin/ipfw/ipfw.8 @@ -3049,16 +3049,6 @@ option could be used to (re)mark user traffic, by adding the following to the appropriate place in ruleset: .Pp .Dl "ipfw add setdscp be ip from any to any dscp af11,af21" -.Pp -This rule drops all incoming packets that appear to be coming from another -directly connected system but on the wrong interface. -For example, a packet with a source address of -.Li 192.168.0.0/24 , -configured on -.Li fxp0 , -but coming in on -.Li fxp1 -would be dropped. .Ss DYNAMIC RULES In order to protect a site from flood attacks involving fake TCP packets, it is safer to use dynamic rules: -- cgit v1.1