summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAngelos D. Keromytis <angelos@cvs.openbsd.org>2001-07-01 22:05:52 +0000
committerAngelos D. Keromytis <angelos@cvs.openbsd.org>2001-07-01 22:05:52 +0000
commita5655ff2f306ce8f10fa943b530f6505cab1223d (patch)
tree6570c29b0a44d3598ccd37c629721bf08569004c
parent6e27fbea60296b9b7b71337d7622d9f5c4a14468 (diff)
IPF cleanups; openbsd@davidkrause.com
-rw-r--r--share/man/man4/ipsec.45
-rw-r--r--share/man/man4/lo.412
-rw-r--r--share/man/man4/pf.414
3 files changed, 18 insertions, 13 deletions
diff --git a/share/man/man4/ipsec.4 b/share/man/man4/ipsec.4
index 402a80baf51..0b5f6cdafe3 100644
--- a/share/man/man4/ipsec.4
+++ b/share/man/man4/ipsec.4
@@ -1,4 +1,4 @@
-.\" $OpenBSD: ipsec.4,v 1.45 2001/06/26 23:24:11 angelos Exp $
+.\" $OpenBSD: ipsec.4,v 1.46 2001/07/01 22:05:50 angelos Exp $
.\"
.\" Copyright 1997 Niels Provos <provos@physnet.uni-hamburg.de>
.\" All rights reserved.
@@ -275,8 +275,7 @@ which can be used in packet filters to specify those
packets that have been or will be processed by
.Tn IPsec.
.Pp
-.Xr ipnat 8
-can also be applied to
+NAT can also be applied to
.Nm enc#
interfaces, but special care should be taken because of the interactions
between NAT and the IPsec flow matching, especially on the packet output path.
diff --git a/share/man/man4/lo.4 b/share/man/man4/lo.4
index 938944d92df..17bc29eae02 100644
--- a/share/man/man4/lo.4
+++ b/share/man/man4/lo.4
@@ -1,4 +1,4 @@
-.\" $OpenBSD: lo.4,v 1.13 2001/06/01 06:22:27 fgsch Exp $
+.\" $OpenBSD: lo.4,v 1.14 2001/07/01 22:05:50 angelos Exp $
.\" $NetBSD: lo.4,v 1.3 1994/11/30 16:22:23 jtc Exp $
.\"
.\" Copyright (c) 1983, 1991, 1993
@@ -107,9 +107,7 @@ automatically, using a nonstandard Internet address (127.1).
Use of that address is now discouraged; a reserved host address
for the local network should be used instead.
.Pp
-.\"You should be careful using
-.\".Xr ipnat 8
-.\"with
-.\".Em link1
-.\"set on an interface, because it may believe the packets are coming
-.\"from a loopback address.
+Care should be taken when using NAT with interfaces that have the
+.Em link1
+flag set, because it may believe the packets are coming from a
+loopback address.
diff --git a/share/man/man4/pf.4 b/share/man/man4/pf.4
index 72bb050fc2a..a34f6e9de83 100644
--- a/share/man/man4/pf.4
+++ b/share/man/man4/pf.4
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pf.4,v 1.2 2001/06/25 05:45:52 kjell Exp $
+.\" $OpenBSD: pf.4,v 1.3 2001/07/01 22:05:51 angelos Exp $
.\"
.\" Copyright (C) 2001, Kjell Wooding. All rights reserved.
.\"
@@ -43,9 +43,17 @@ interface is a packet filter pseudo-device for IPv4.
is administered using the
.Xr pfctl 8
utility, or through an ioctl interface.
+.Sh FILES
+.Bl -tag -width /dev/pf -compact
+.It Pa /dev/pf
+packet filtering device.
.Sh SEE ALSO
.Xr bridge 4 ,
.Xr pfctl 8
-.\"
+.Sh HISTORY
+The
+.Nm
+packet filtering mechanism first appeared in
+.Ox 3.0 .
.Sh BUGS
-Probably Several
+Probably several.