Changeset View
Changeset View
Standalone View
Standalone View
head/sbin/ipfw/ipfw.8
Show First 20 Lines • Show All 505 Lines • ▼ Show 20 Lines | |||||
# packets from ip_output | # packets from ip_output | ||||
ipfw add 10 skipto 3000 all from any to any not layer2 out | ipfw add 10 skipto 3000 all from any to any not layer2 out | ||||
# packets from ether_output_frame | # packets from ether_output_frame | ||||
ipfw add 10 skipto 4000 all from any to any layer2 out | ipfw add 10 skipto 4000 all from any to any layer2 out | ||||
.Ed | .Ed | ||||
.Pp | .Pp | ||||
(yes, at the moment there is no way to differentiate between | (yes, at the moment there is no way to differentiate between | ||||
ether_demux and bdg_forward). | ether_demux and bdg_forward). | ||||
.Pp | |||||
Also note that only actions | |||||
.Cm allow, | |||||
.Cm deny, | |||||
.Cm netgraph, | |||||
.Cm ngtee | |||||
and related to | |||||
.Cm dummynet | |||||
are processed for | |||||
.Cm layer2 | |||||
frames and all other actions act as if they were | |||||
.Cm allow | |||||
for such frames. | |||||
Full set of actions is supported for IP packets without | |||||
.Cm layer2 | |||||
headers only. | |||||
For example, | |||||
.Cm divert | |||||
action does not divert | |||||
.Cm layer2 | |||||
frames. | |||||
.Sh SYNTAX | .Sh SYNTAX | ||||
In general, each keyword or argument must be provided as | In general, each keyword or argument must be provided as | ||||
a separate command line argument, with no leading or trailing | a separate command line argument, with no leading or trailing | ||||
spaces. | spaces. | ||||
Keywords are case-sensitive, whereas arguments may | Keywords are case-sensitive, whereas arguments may | ||||
or may not be case-sensitive depending on their nature | or may not be case-sensitive depending on their nature | ||||
(e.g.\& uid's are, hostnames are not). | (e.g.\& uid's are, hostnames are not). | ||||
.Pp | .Pp | ||||
▲ Show 20 Lines • Show All 4,117 Lines • Show Last 20 Lines |