Deleted Added
full compact
ipfw.8 (171723) ipfw.8 (171732)
1.\"
1.\"
2.\" $FreeBSD: head/sbin/ipfw/ipfw.8 171723 2007-08-04 20:35:42Z csjp $
2.\" $FreeBSD: head/sbin/ipfw/ipfw.8 171732 2007-08-05 16:16:15Z bz $
3.\"
3.\"
4.Dd June 16, 2007
4.Dd August 5, 2007
5.Dt IPFW 8
6.Os
7.Sh NAME
8.Nm ipfw
9.Nd IP firewall and traffic shaper control program
10.Sh SYNOPSIS
11.Nm
12.Op Fl cq

--- 1233 unchanged lines hidden (view full) ---

1246with a
1247.Ql \&! .
1248.It Cm ipprecedence Ar precedence
1249Matches IPv4 packets whose precedence field is equal to
1250.Ar precedence .
1251.It Cm ipsec
1252Matches packets that have IPSEC history associated with them
1253(i.e., the packet comes encapsulated in IPSEC, the kernel
5.Dt IPFW 8
6.Os
7.Sh NAME
8.Nm ipfw
9.Nd IP firewall and traffic shaper control program
10.Sh SYNOPSIS
11.Nm
12.Op Fl cq

--- 1233 unchanged lines hidden (view full) ---

1246with a
1247.Ql \&! .
1248.It Cm ipprecedence Ar precedence
1249Matches IPv4 packets whose precedence field is equal to
1250.Ar precedence .
1251.It Cm ipsec
1252Matches packets that have IPSEC history associated with them
1253(i.e., the packet comes encapsulated in IPSEC, the kernel
1254has IPSEC support and IPSEC_FILTERGIF option, and can correctly
1254has IPSEC support and IPSEC_FILTERTUNNEL option, and can correctly
1255decapsulate it).
1256.Pp
1257Note that specifying
1258.Cm ipsec
1259is different from specifying
1260.Cm proto Ar ipsec
1261as the latter will only look at the specific IP protocol field,
1262irrespective of IPSEC kernel support and the validity of the IPSEC data.

--- 1396 unchanged lines hidden ---
1255decapsulate it).
1256.Pp
1257Note that specifying
1258.Cm ipsec
1259is different from specifying
1260.Cm proto Ar ipsec
1261as the latter will only look at the specific IP protocol field,
1262irrespective of IPSEC kernel support and the validity of the IPSEC data.

--- 1396 unchanged lines hidden ---