Partly apply the patch from bin/5466. One fix was allready imported during
the last ipf import.
This commit is contained in:
parent
17371233fa
commit
0d6591bf7b
|
@ -1,4 +1,4 @@
|
|||
.\" $NetBSD: ipf.8,v 1.6 1998/05/17 16:50:15 veego Exp $
|
||||
.\" $NetBSD: ipf.8,v 1.7 1998/05/20 19:21:19 veego Exp $
|
||||
.\"
|
||||
.TH IPF 8
|
||||
.SH NAME
|
||||
|
@ -68,20 +68,13 @@ lists.
|
|||
.B \-I
|
||||
Set the list to make changes to the inactive list.
|
||||
.TP
|
||||
.BR \-F \0<i|o|a>
|
||||
.BR \-l \0<pass|block|nomatch>
|
||||
Use of the \fB-l\fP flag toggles default logging of packets. Valid
|
||||
arguments to this option are \fBpass\fP, \fBblock\fP and \fBnomatch\fP.
|
||||
When an option is set, any packet which exits filtering and matches the
|
||||
set category is logged. This is most useful for causing all packets
|
||||
which don't match any of the loaded rules to be logged.
|
||||
.TP
|
||||
.BR \-F \0<s|S>
|
||||
To flush entries from the state table, the \fB-F\fP option is used in
|
||||
conjuction with either "s" (removes state information about any non-fully
|
||||
established connections) or "S" (deletes the entire state table). Only
|
||||
one of the two options may be given. A fully established connection
|
||||
will show up in \fBipfstat -s\fP output as 4/4, with deviations either
|
||||
.TP
|
||||
.B \-n
|
||||
This flag (no-change) prevents \fBipf\fP from actually making any ioctl
|
||||
calls or doing anything which would alter the currently running kernel.
|
||||
|
|
Loading…
Reference in New Issue