30c30
< .\" $FreeBSD: head/usr.sbin/faithd/faithd.8 140368 2005-01-17 07:44:44Z ru $
---
> .\" $FreeBSD: head/usr.sbin/faithd/faithd.8 201889 2010-01-09 10:24:09Z brueffer $
32c32
< .Dd May 17, 1998
---
> .Dd January 9, 2010
47,48c47,48
< utility provides IPv6-to-IPv4 TCP relay.
< It must be used on an IPv4/v6 dual stack router.
---
> utility provides IPv6-to-IPv4 TCP relaying.
> It can only be used on an IPv4/v6 dual stack router.
54,56c54
< traffic,
< .Nm
< will relay the
---
> traffic, it will relay the
60c58
< Destination for relayed
---
> The destination for the relayed
76c74
< To use
---
> To use the
80c78
< Kernel must be properly configured to route all the TCP connection
---
> The kernel must be properly configured to route all the TCP connections
83c81
< pseudo interface, by using
---
> pseudo interface, using the
94c92
< toward reserved
---
> for the reserved
104,105c102,103
< utility needs a special name-to-address translation logic, so that
< hostnames gets resolved into special
---
> utility needs special name-to-address translation logic, so that
> hostnames get resolved into the special
108,110c106,108
< For small-scale installation, use
< .Xr hosts 5 .
< For large-scale installation, it is useful to have
---
> For small-scale installations, use
> .Xr hosts 5 ;
> For large-scale installations, it is useful to have
114,118c112,115
< is available
< at
< .Pa http://www.vermicelli.pasta.cs.uit.no/ipv6/software.html .
< Make sure you do not propagate translated DNS records to normal DNS cloud,
< it is highly harmful.
---
> is available at
> .Pa http://www.vermicelli.pasta.cs.uit.no/software/totd.html .
> Make sure you do not propagate translated DNS records over to normal
> DNS, as it can cause severe problems.
153c150
< utility will invoke local daemon at
---
> utility will invoke a local daemon at
155c152
< if the destination address is local interface address,
---
> if the destination address is a local interface address,
185c182
< When translating FTP protocol,
---
> When translating the FTP protocol,
194,195c191,192
< to avoid stale sessions from chewing up resources.
< This may be inappropriate for some of the services
---
> to prevent stale sessions from chewing up resources.
> This may be inappropriate for some services
203c200
< will handle connection passed from standard input.
---
> will handle connections passed from standard input.
209c206
< will invoke service-specific daemon like
---
> will invoke a service-specific daemon like
222c219
< on FTP port, it will operate as a FTP relay.
---
> on the FTP port, it will operate as an FTP relay.
229c226
< To prevent malicious accesses,
---
> To prevent malicious access,
231c228
< implements a simple address-based access control.
---
> implements simple address-based access control.
242c239
< contains directives with the following format:
---
> configuration file contains directives of the following format:
283a281
> the
337,338c335,336
< will open listening sockets with enabling kernel TCP relay support.
< Whenever connection comes in,
---
> will open listening sockets with kernel TCP relay support enabled.
> Whenever a connection comes in,
342c340
< If it the connection endpoint is in the reserved IPv6 address prefix.
---
> If the connection endpoint is in the reserved IPv6 address prefix.
380c378
< utility first appeared in WIDE Hydrangea IPv6 protocol stack kit.
---
> utility first appeared in the WIDE Hydrangea IPv6 protocol stack kit.
385c383
< .Fx 4.0
---
> .Fx 4.0 .
395,396c393
< or by using IPv6 packet filters.
< It is to protect
---
> or by using IPv6 packet filters, to protect the
398,400c395,397
< service from malicious parties and avoid theft of service/bandwidth.
< IPv6 destination address can be limited by
< carefully configuring routing entries that points to
---
> service from malicious parties, and to avoid theft of service/bandwidth.
> IPv6 destination addresses can be limited by
> carefully configuring routing entries that point to
404,405c401,402
< IPv6 source address needs to be filtered by using packet filters.
< Documents listed in
---
> The IPv6 source address needs to be filtered using packet filters.
> The documents listed in
407c404
< have more discussions on this topic.
---
> have more information on this topic.
< .\" $FreeBSD: head/usr.sbin/faithd/faithd.8 140368 2005-01-17 07:44:44Z ru $
---
> .\" $FreeBSD: head/usr.sbin/faithd/faithd.8 201889 2010-01-09 10:24:09Z brueffer $
32c32
< .Dd May 17, 1998
---
> .Dd January 9, 2010
47,48c47,48
< utility provides IPv6-to-IPv4 TCP relay.
< It must be used on an IPv4/v6 dual stack router.
---
> utility provides IPv6-to-IPv4 TCP relaying.
> It can only be used on an IPv4/v6 dual stack router.
54,56c54
< traffic,
< .Nm
< will relay the
---
> traffic, it will relay the
60c58
< Destination for relayed
---
> The destination for the relayed
76c74
< To use
---
> To use the
80c78
< Kernel must be properly configured to route all the TCP connection
---
> The kernel must be properly configured to route all the TCP connections
83c81
< pseudo interface, by using
---
> pseudo interface, using the
94c92
< toward reserved
---
> for the reserved
104,105c102,103
< utility needs a special name-to-address translation logic, so that
< hostnames gets resolved into special
---
> utility needs special name-to-address translation logic, so that
> hostnames get resolved into the special
108,110c106,108
< For small-scale installation, use
< .Xr hosts 5 .
< For large-scale installation, it is useful to have
---
> For small-scale installations, use
> .Xr hosts 5 ;
> For large-scale installations, it is useful to have
114,118c112,115
< is available
< at
< .Pa http://www.vermicelli.pasta.cs.uit.no/ipv6/software.html .
< Make sure you do not propagate translated DNS records to normal DNS cloud,
< it is highly harmful.
---
> is available at
> .Pa http://www.vermicelli.pasta.cs.uit.no/software/totd.html .
> Make sure you do not propagate translated DNS records over to normal
> DNS, as it can cause severe problems.
153c150
< utility will invoke local daemon at
---
> utility will invoke a local daemon at
155c152
< if the destination address is local interface address,
---
> if the destination address is a local interface address,
185c182
< When translating FTP protocol,
---
> When translating the FTP protocol,
194,195c191,192
< to avoid stale sessions from chewing up resources.
< This may be inappropriate for some of the services
---
> to prevent stale sessions from chewing up resources.
> This may be inappropriate for some services
203c200
< will handle connection passed from standard input.
---
> will handle connections passed from standard input.
209c206
< will invoke service-specific daemon like
---
> will invoke a service-specific daemon like
222c219
< on FTP port, it will operate as a FTP relay.
---
> on the FTP port, it will operate as an FTP relay.
229c226
< To prevent malicious accesses,
---
> To prevent malicious access,
231c228
< implements a simple address-based access control.
---
> implements simple address-based access control.
242c239
< contains directives with the following format:
---
> configuration file contains directives of the following format:
283a281
> the
337,338c335,336
< will open listening sockets with enabling kernel TCP relay support.
< Whenever connection comes in,
---
> will open listening sockets with kernel TCP relay support enabled.
> Whenever a connection comes in,
342c340
< If it the connection endpoint is in the reserved IPv6 address prefix.
---
> If the connection endpoint is in the reserved IPv6 address prefix.
380c378
< utility first appeared in WIDE Hydrangea IPv6 protocol stack kit.
---
> utility first appeared in the WIDE Hydrangea IPv6 protocol stack kit.
385c383
< .Fx 4.0
---
> .Fx 4.0 .
395,396c393
< or by using IPv6 packet filters.
< It is to protect
---
> or by using IPv6 packet filters, to protect the
398,400c395,397
< service from malicious parties and avoid theft of service/bandwidth.
< IPv6 destination address can be limited by
< carefully configuring routing entries that points to
---
> service from malicious parties, and to avoid theft of service/bandwidth.
> IPv6 destination addresses can be limited by
> carefully configuring routing entries that point to
404,405c401,402
< IPv6 source address needs to be filtered by using packet filters.
< Documents listed in
---
> The IPv6 source address needs to be filtered using packet filters.
> The documents listed in
407c404
< have more discussions on this topic.
---
> have more information on this topic.