Partly apply the patch from bin/5466. One fix was allready imported during

the last ipf import.
This commit is contained in:
veego 1998-05-20 19:21:19 +00:00
parent 17371233fa
commit 0d6591bf7b
1 changed files with 2 additions and 9 deletions

View File

@ -1,4 +1,4 @@
.\" $NetBSD: ipf.8,v 1.6 1998/05/17 16:50:15 veego Exp $
.\" $NetBSD: ipf.8,v 1.7 1998/05/20 19:21:19 veego Exp $
.\"
.TH IPF 8
.SH NAME
@ -68,20 +68,13 @@ lists.
.B \-I
Set the list to make changes to the inactive list.
.TP
.BR \-F \0<i|o|a>
.BR \-l \0<pass|block|nomatch>
Use of the \fB-l\fP flag toggles default logging of packets. Valid
arguments to this option are \fBpass\fP, \fBblock\fP and \fBnomatch\fP.
When an option is set, any packet which exits filtering and matches the
set category is logged. This is most useful for causing all packets
which don't match any of the loaded rules to be logged.
.TP
.BR \-F \0<s|S>
To flush entries from the state table, the \fB-F\fP option is used in
conjuction with either "s" (removes state information about any non-fully
established connections) or "S" (deletes the entire state table). Only
one of the two options may be given. A fully established connection
will show up in \fBipfstat -s\fP output as 4/4, with deviations either
.TP
.B \-n
This flag (no-change) prevents \fBipf\fP from actually making any ioctl
calls or doing anything which would alter the currently running kernel.