Changeset View
Changeset View
Standalone View
Standalone View
head/sbin/ipfw/ipfw.8
.\" | .\" | ||||
.\" $FreeBSD$ | .\" $FreeBSD$ | ||||
.\" | .\" | ||||
.Dd October 21, 2018 | .Dd November 12, 2018 | ||||
.Dt IPFW 8 | .Dt IPFW 8 | ||||
.Os | .Os | ||||
.Sh NAME | .Sh NAME | ||||
.Nm ipfw | .Nm ipfw | ||||
.Nd User interface for firewall, traffic shaper, packet scheduler, | .Nd User interface for firewall, traffic shaper, packet scheduler, | ||||
in-kernel NAT. | in-kernel NAT. | ||||
.Sh SYNOPSIS | .Sh SYNOPSIS | ||||
.Ss FIREWALL CONFIGURATION | .Ss FIREWALL CONFIGURATION | ||||
▲ Show 20 Lines • Show All 3,477 Lines • ▼ Show 20 Lines | |||||
The following parameters can be configured: | The following parameters can be configured: | ||||
.Bl -tag -width indent | .Bl -tag -width indent | ||||
.It Cm int_prefix Ar ipv6_prefix | .It Cm int_prefix Ar ipv6_prefix | ||||
IPv6 prefix used in internal network. | IPv6 prefix used in internal network. | ||||
NPTv6 module translates source address when it matches this prefix. | NPTv6 module translates source address when it matches this prefix. | ||||
.It Cm ext_prefix Ar ipv6_prefix | .It Cm ext_prefix Ar ipv6_prefix | ||||
IPv6 prefix used in external network. | IPv6 prefix used in external network. | ||||
NPTv6 module translates destination address when it matches this prefix. | NPTv6 module translates destination address when it matches this prefix. | ||||
.It Cm ext_if Ar nic | |||||
The NPTv6 module will use first global IPv6 address from interface | |||||
.Ar nic | |||||
as external prefix. | |||||
It can be useful when IPv6 prefix of external network is dynamically obtained. | |||||
.Cm ext_prefix | |||||
and | |||||
.Cm ext_if | |||||
options are mutually exclusive. | |||||
.It Cm prefixlen Ar length | .It Cm prefixlen Ar length | ||||
The length of specified IPv6 prefixes. It must be in range from 8 to 64. | The length of specified IPv6 prefixes. It must be in range from 8 to 64. | ||||
.El | .El | ||||
.Pp | .Pp | ||||
Note that the prefix translation rules are silently ignored when IPv6 packet | Note that the prefix translation rules are silently ignored when IPv6 packet | ||||
forwarding is disabled. | forwarding is disabled. | ||||
To enable the packet forwarding, set the sysctl variable | To enable the packet forwarding, set the sysctl variable | ||||
.Va net.inet6.ip6.forwarding | .Va net.inet6.ip6.forwarding | ||||
▲ Show 20 Lines • Show All 1,154 Lines • Show Last 20 Lines |