ipfw.8 (171723) | ipfw.8 (171732) |
---|---|
1.\" | 1.\" |
2.\" $FreeBSD: head/sbin/ipfw/ipfw.8 171723 2007-08-04 20:35:42Z csjp $ | 2.\" $FreeBSD: head/sbin/ipfw/ipfw.8 171732 2007-08-05 16:16:15Z bz $ |
3.\" | 3.\" |
4.Dd June 16, 2007 | 4.Dd August 5, 2007 |
5.Dt IPFW 8 6.Os 7.Sh NAME 8.Nm ipfw 9.Nd IP firewall and traffic shaper control program 10.Sh SYNOPSIS 11.Nm 12.Op Fl cq --- 1233 unchanged lines hidden (view full) --- 1246with a 1247.Ql \&! . 1248.It Cm ipprecedence Ar precedence 1249Matches IPv4 packets whose precedence field is equal to 1250.Ar precedence . 1251.It Cm ipsec 1252Matches packets that have IPSEC history associated with them 1253(i.e., the packet comes encapsulated in IPSEC, the kernel | 5.Dt IPFW 8 6.Os 7.Sh NAME 8.Nm ipfw 9.Nd IP firewall and traffic shaper control program 10.Sh SYNOPSIS 11.Nm 12.Op Fl cq --- 1233 unchanged lines hidden (view full) --- 1246with a 1247.Ql \&! . 1248.It Cm ipprecedence Ar precedence 1249Matches IPv4 packets whose precedence field is equal to 1250.Ar precedence . 1251.It Cm ipsec 1252Matches packets that have IPSEC history associated with them 1253(i.e., the packet comes encapsulated in IPSEC, the kernel |
1254has IPSEC support and IPSEC_FILTERGIF option, and can correctly | 1254has IPSEC support and IPSEC_FILTERTUNNEL option, and can correctly |
1255decapsulate it). 1256.Pp 1257Note that specifying 1258.Cm ipsec 1259is different from specifying 1260.Cm proto Ar ipsec 1261as the latter will only look at the specific IP protocol field, 1262irrespective of IPSEC kernel support and the validity of the IPSEC data. --- 1396 unchanged lines hidden --- | 1255decapsulate it). 1256.Pp 1257Note that specifying 1258.Cm ipsec 1259is different from specifying 1260.Cm proto Ar ipsec 1261as the latter will only look at the specific IP protocol field, 1262irrespective of IPSEC kernel support and the validity of the IPSEC data. --- 1396 unchanged lines hidden --- |