summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJason McIntyre <jmc@cvs.openbsd.org>2018-03-10 15:50:32 +0000
committerJason McIntyre <jmc@cvs.openbsd.org>2018-03-10 15:50:32 +0000
commitc9533e7f54362f69404a240f8b08dca64aad2812 (patch)
tree01323dfb459296b5273bf30a8f19c0cc3af8b01e
parent5cfbc14b024d761425ccc47eba23318949e03d91 (diff)
minor tweaks; ok phessler
-rw-r--r--share/man/man4/rdomain.427
1 files changed, 14 insertions, 13 deletions
diff --git a/share/man/man4/rdomain.4 b/share/man/man4/rdomain.4
index 31b388b5f12..ef1b2a676d7 100644
--- a/share/man/man4/rdomain.4
+++ b/share/man/man4/rdomain.4
@@ -1,4 +1,4 @@
-.\" $OpenBSD: rdomain.4,v 1.10 2016/11/14 16:17:50 jmc Exp $
+.\" $OpenBSD: rdomain.4,v 1.11 2018/03/10 15:50:31 jmc Exp $
.\"
.\" Copyright (c) 2015 Peter Hessler <phessler@openbsd.org>
.\"
@@ -14,7 +14,7 @@
.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\"
-.Dd $Mdocdate: November 14 2016 $
+.Dd $Mdocdate: March 10 2018 $
.Dt RDOMAIN 4
.Os
.Sh NAME
@@ -48,8 +48,7 @@ Each
is a completely separate address space in the kernel.
An IP address (e.g. 10.0.0.1/16) can be assigned in more than one
.Nm rdomain ,
-but
-cannot be assigned more than once per
+but cannot be assigned more than once per
.Nm rdomain .
An interface belongs to one and only one
.Nm rdomain .
@@ -87,7 +86,7 @@ The highest ID that can be used for an
.Nm rdomain
is 255.
.Sh EXAMPLES
-Set up em0 and lo4 onto rdomain 4:
+Put em0 and lo4 in rdomain 4:
.Bd -literal -offset indent
# ifconfig em0 rdomain 4
# ifconfig lo4 inet 127.0.0.1/8
@@ -100,7 +99,9 @@ Set a default route and localhost reject route within rdomain 4:
# route -T4 -n add default 192.0.2.1
.Ed
.Pp
-Start an sshd in rdomain 4:
+Start
+.Xr sshd 8
+in rdomain 4:
.Pp
.Dl # route -T4 exec /usr/sbin/sshd
.Pp
@@ -108,8 +109,10 @@ Display to which rdomain processes are assigned:
.Pp
.Dl # ps aux -o rtable
.Pp
-pf.conf snippet to block incoming port 80, and nat-to and move to rtable 0
-on interface em1:
+A
+.Xr pf.conf 5
+snippet to block incoming port 80,
+and nat-to and move to rtable 0 on interface em1:
.Bd -literal -offset indent
block in on rdomain 4 proto tcp to any port 80
match out on rdomain 4 to !$internal_net nat-to (em1) rtable 0
@@ -124,16 +127,14 @@ match out on rdomain 4 to !$internal_net nat-to (em1) rtable 0
.Sh HISTORY
.Ox
support for
-.\" XXX - rdomains, not 'rtable'
-.\" .Nm
-rdomains
+.Nm rdomain
first appeared in
.Ox 4.9
and IPv6 support first appeared in
.Ox 5.5 .
.Sh CAVEATS
-When an rtable already exists a new domain with the same ID cannot be created.
-Since there is no command to destroy an rtable
+When an rtable already exists, a new domain with the same ID cannot be created.
+Since there is no command to destroy an rtable,
a reboot is necessary.
.Pp
No tool is available to assign more than one rtable to an rdomain