Changeset View
Changeset View
Standalone View
Standalone View
sbin/ipfw/ipfw.8
| Show First 20 Lines • Show All 1,389 Lines • ▼ Show 20 Lines | |||||
| The address list is evaluated at the time the packet is | The address list is evaluated at the time the packet is | ||||
| analysed. | analysed. | ||||
| .It Cm table Ns Pq Ar name Ns Op , Ns Ar value | .It Cm table Ns Pq Ar name Ns Op , Ns Ar value | ||||
| Matches any IPv4 or IPv6 address for which an entry exists in the lookup table | Matches any IPv4 or IPv6 address for which an entry exists in the lookup table | ||||
| .Ar number . | .Ar number . | ||||
| If an optional 32-bit unsigned | If an optional 32-bit unsigned | ||||
| .Ar value | .Ar value | ||||
| is also specified, an entry will match only if it has this value. | is also specified, an entry will match only if it has this value. | ||||
| If | |||||
| .Ar value | |||||
| is specified in form | |||||
| .Ar valtype=value , | |||||
| then specified value type field will be checked. | |||||
| It can be | |||||
| .Ar skipto, pipe, fib, nat, dscp, tag, divert, netgraph, limit, nh4 | |||||
| and | |||||
| .Ar mark. | |||||
| See the | See the | ||||
| .Sx LOOKUP TABLES | .Sx LOOKUP TABLES | ||||
| section below for more information on lookup tables. | section below for more information on lookup tables. | ||||
| .El | .El | ||||
| .It Ar addr-list : ip-addr Ns Op Ns , Ns Ar addr-list | .It Ar addr-list : ip-addr Ns Op Ns , Ns Ar addr-list | ||||
| .It Ar ip-addr : | .It Ar ip-addr : | ||||
| A host or subnet address specified in one of the following ways: | A host or subnet address specified in one of the following ways: | ||||
| .Bl -tag -width indent | .Bl -tag -width indent | ||||
| ▲ Show 20 Lines • Show All 454 Lines • ▼ Show 20 Lines | |||||
| The firewall will only allow | The firewall will only allow | ||||
| .Ar N | .Ar N | ||||
| connections with the same | connections with the same | ||||
| set of parameters as specified in the rule. | set of parameters as specified in the rule. | ||||
| One or more | One or more | ||||
| of source and destination addresses and ports can be | of source and destination addresses and ports can be | ||||
| specified. | specified. | ||||
| .It Cm lookup Bro Cm dst-ip | dst-port | dst-mac | src-ip | src-port | src-mac | uid | | .It Cm lookup Bro Cm dst-ip | dst-port | dst-mac | src-ip | src-port | src-mac | uid | | ||||
| .Cm jail | dscp | mark Brc Ar name | .Cm jail | dscp | mark | rulenum Brc Ar name | ||||
| Search an entry in lookup table | Search an entry in lookup table | ||||
| .Ar name | .Ar name | ||||
| that matches the field specified as argument. | that matches the field specified as argument. | ||||
| If not found, the match fails. | If not found, the match fails. | ||||
| Otherwise, the match succeeds and | Otherwise, the match succeeds and | ||||
| .Cm tablearg | .Cm tablearg | ||||
| is set to the value extracted from the table. | is set to the value extracted from the table. | ||||
| .Pp | .Pp | ||||
| ▲ Show 20 Lines • Show All 3,115 Lines • Show Last 20 Lines | |||||