diff --git a/usr.sbin/ipf/ipf/ipf.8 b/usr.sbin/ipf/ipf/ipf.8 index 9dda32eb3406..53fa7d9038a6 100644 --- a/usr.sbin/ipf/ipf/ipf.8 +++ b/usr.sbin/ipf/ipf/ipf.8 @@ -1,4 +1,4 @@ -.\" $NetBSD: ipf.8,v 1.6 1998/05/17 16:50:15 veego Exp $ +.\" $NetBSD: ipf.8,v 1.7 1998/05/20 19:21:19 veego Exp $ .\" .TH IPF 8 .SH NAME @@ -68,20 +68,13 @@ lists. .B \-I Set the list to make changes to the inactive list. .TP -.BR \-F \0 +.BR \-l \0 Use of the \fB-l\fP flag toggles default logging of packets. Valid arguments to this option are \fBpass\fP, \fBblock\fP and \fBnomatch\fP. When an option is set, any packet which exits filtering and matches the set category is logged. This is most useful for causing all packets which don't match any of the loaded rules to be logged. .TP -.BR \-F \0 -To flush entries from the state table, the \fB-F\fP option is used in -conjuction with either "s" (removes state information about any non-fully -established connections) or "S" (deletes the entire state table). Only -one of the two options may be given. A fully established connection -will show up in \fBipfstat -s\fP output as 4/4, with deviations either -.TP .B \-n This flag (no-change) prevents \fBipf\fP from actually making any ioctl calls or doing anything which would alter the currently running kernel.