Deleted Added
full compact
ipfw.8 (302408) ipfw.8 (315514)
1.\"
1.\"
2.\" $FreeBSD: stable/11/sbin/ipfw/ipfw.8 301180 2016-06-02 00:42:15Z truckman $
2.\" $FreeBSD: stable/11/sbin/ipfw/ipfw.8 315514 2017-03-18 22:04:20Z ae $
3.\"
4.Dd May 26, 2016
5.Dt IPFW 8
6.Os
7.Sh NAME
8.Nm ipfw
9.Nd User interface for firewall, traffic shaper, packet scheduler,
10in-kernel NAT.

--- 1502 unchanged lines hidden (view full) ---

1513with a
1514.Ql \&! .
1515.It Cm ipprecedence Ar precedence
1516Matches IPv4 packets whose precedence field is equal to
1517.Ar precedence .
1518.It Cm ipsec
1519Matches packets that have IPSEC history associated with them
1520(i.e., the packet comes encapsulated in IPSEC, the kernel
3.\"
4.Dd May 26, 2016
5.Dt IPFW 8
6.Os
7.Sh NAME
8.Nm ipfw
9.Nd User interface for firewall, traffic shaper, packet scheduler,
10in-kernel NAT.

--- 1502 unchanged lines hidden (view full) ---

1513with a
1514.Ql \&! .
1515.It Cm ipprecedence Ar precedence
1516Matches IPv4 packets whose precedence field is equal to
1517.Ar precedence .
1518.It Cm ipsec
1519Matches packets that have IPSEC history associated with them
1520(i.e., the packet comes encapsulated in IPSEC, the kernel
1521has IPSEC support and IPSEC_FILTERTUNNEL option, and can correctly
1522decapsulate it).
1521has IPSEC support, and can correctly decapsulate it).
1523.Pp
1524Note that specifying
1525.Cm ipsec
1526is different from specifying
1527.Cm proto Ar ipsec
1528as the latter will only look at the specific IP protocol field,
1529irrespective of IPSEC kernel support and the validity of the IPSEC data.
1530.Pp

--- 2195 unchanged lines hidden ---
1522.Pp
1523Note that specifying
1524.Cm ipsec
1525is different from specifying
1526.Cm proto Ar ipsec
1527as the latter will only look at the specific IP protocol field,
1528irrespective of IPSEC kernel support and the validity of the IPSEC data.
1529.Pp

--- 2195 unchanged lines hidden ---