Inform users of the kernel options necc. to run these programs, and

point them to options(4) for more details.  Also point out that ipf
is necc. for ipnat to function.  Oh, and convert ipnat.8 to mandoc
while I was in here... was easier to convert it then rewrite my stuff
after I noticed..
Closes PR# 4813 by Jeff Thieleke
This commit is contained in:
garbled 1999-01-12 18:41:07 +00:00
parent 3b7ac44e6c
commit 1c8910db02
2 changed files with 67 additions and 36 deletions

View File

@ -1,4 +1,4 @@
.\" $NetBSD: ipmon.8,v 1.6 1998/11/22 15:21:55 mrg Exp $
.\" $NetBSD: ipmon.8,v 1.7 1999/01/12 18:41:07 garbled Exp $
.\"
.TH ipmon 8
.SH NAME
@ -30,6 +30,10 @@ default or a filename, if given on the command line. Should the \fB\-s\fP
option be used, output is instead sent to \fBsyslogd(8)\fP. Messages sent
via syslog have the day, month and year removed from the message, but the
time (including microseconds), as recorded in the log, is still included.
.LP
In order for \fBipmon\fP to properly work, the kernel option
\fBIPFILTER_LOG\fP must be turned on in your kernel. Please see
\fBoptions(4)\fP for more details.
.SH OPTIONS
.TP
.B \-a

View File

@ -1,52 +1,79 @@
.\" $NetBSD: ipnat.8,v 1.5 1998/11/22 15:21:55 mrg Exp $
.\" $NetBSD: ipnat.8,v 1.6 1999/01/12 18:41:07 garbled Exp $
.\"
.TH IPNAT 8
.SH NAME
.Dd January 12, 1999
.Dt IPNAT 8
.Os
.Sh NAME
ipnat \- user interface to the NAT
.SH SYNOPSIS
.B ipnat
[
.B \-lnrsvCF
]
.B \-f <\fIfilename\fP>
.SH DESCRIPTION
.PP
\fBipnat\fP opens the filename given (treating "\-" as stdin) and parses the
.Sh SYNOPSIS
.Nm ipnat
.Op Fl lnrsvCF
.Fl f Ar filename
.Sh DESCRIPTION
.Pp
.Nm
opens the filename given (treating
.Dq -
as stdin) and parses the
file for a set of rules which are to be added or removed from the IP NAT.
.PP
Each rule processed by \fBipnat\fP
Each rule processed by
.Nm
is added to the kernels internal lists if there are no parsing problems.
Rules are added to the end of the internal lists, matching the order in
which they appear when given to \fBipnat\fP.
.SH OPTIONS
.TP
.B \-C
which they appear when given to
.Nm Ns .
.Pp
.Sy Please Note
That
.Nm
is not functional without
.Xr ipf 8
running. In addition, the following kernel options need to be turned on
in order to use
.Nm Ns :
.Em GATEWAY ,
.Em IPFORWARDING
and
.Em PFIL_HOOKS .
The
.Xr sysctl
.Pp
.Dl Dq "sysctl net.inet.ip.forwarding
.Pp
will inform you if
.Em IPFORWARDING
is currently turned on in your kernel. Please see
.Xr options 4
and
.Xr sysctl 8
for more information on turning these parameters on.
.Sh OPTIONS
.Bl -tag -width four
.It Fl C
delete all entries in the current NAT rule listing (NAT rules)
.TP
.B \-F
.It Fl F
delete all active entries in the current NAT translation table (currently
active NAT mappings)
.TP
.B \-l
.It Fl l
Show the list of current NAT table entry mappings.
.TP
.B \-n
.It Fl n
This flag (no-change) prevents \fBipf\fP from actually making any ioctl
calls or doing anything which would alter the currently running kernel.
.TP
.B \-s
.It Fl s
Retrieve and display NAT statistics
.TP
.B \-r
.It Fl r
Remove matching NAT rules rather than add them to the internal lists
.TP
.B \-v
.It Fl v
Turn verbose mode on. Displays information relating to rule processing
and active rules/table entries.
.DT
.SH FILES
/dev/ipnat
.El
.Sh FILES
.Pa /dev/ipnat
.br
/usr/share/examples/ipf Directory with examples.
.SH SEE ALSO
ipnat(5), ipf(8), ipfstat(8)
.Pa /usr/share/examples/ipf
Directory with examples.
.Sh SEE ALSO
.Xr ipnat 5 ,
.Xr ipf 8 ,
.Xr ipfstat 8