summaryrefslogtreecommitdiff
path: root/share
diff options
context:
space:
mode:
authorJason McIntyre <jmc@cvs.openbsd.org>2003-01-21 19:59:10 +0000
committerJason McIntyre <jmc@cvs.openbsd.org>2003-01-21 19:59:10 +0000
commit1908f8cbef776236c874cdacbe9591ac4bd8fcf0 (patch)
tree60b6a5651914340f2c2ce5bf0776db59ecb014ea /share
parent4d00ed48595105f2f08ef55cb2ed68e4c9d33019 (diff)
typos;
ok deraadt@
Diffstat (limited to 'share')
-rw-r--r--share/man/man5/passwd.54
-rw-r--r--share/man/man5/pf.conf.531
-rw-r--r--share/man/man5/resolv.conf.56
3 files changed, 20 insertions, 21 deletions
diff --git a/share/man/man5/passwd.5 b/share/man/man5/passwd.5
index 447d40b82fa..4b564d4c29f 100644
--- a/share/man/man5/passwd.5
+++ b/share/man/man5/passwd.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: passwd.5,v 1.23 2002/03/27 18:10:38 millert Exp $
+.\" $OpenBSD: passwd.5,v 1.24 2003/01/21 19:59:09 jmc Exp $
.\" $NetBSD: passwd.5,v 1.4 1995/07/28 06:46:05 phil Exp $
.\"
.\" Copyright (c) 1988, 1991, 1993
@@ -234,7 +234,7 @@ or
.Ar gid
fields, the specified numbers will override the information retrieved
from the YP maps.
-As well, if the
+Additionally, if the
.Ar gecos ,
.Ar dir ,
or
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index c08abfddfc2..bab0f063edc 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pf.conf.5,v 1.165 2003/01/15 23:19:19 henning Exp $
+.\" $OpenBSD: pf.conf.5,v 1.166 2003/01/21 19:59:09 jmc Exp $
.\"
.\" Copyright (c) 2002, Daniel Hartmeier
.\" All rights reserved.
@@ -48,7 +48,7 @@ User-defined variables may be defined and later used, simplifying
the configuration file.
.It Options
Options tune the behaviour of the packet filtering engine.
-.It Traffic Normalization (e.g. Pa scrub No )
+.It Traffic Normalization (e.g. Pa scrub Ns )
Traffic normalization protects internal machines against inconsistencies
in Internet protocols and implementations.
.It Queueing
@@ -135,7 +135,7 @@ the connection.
Increasing tcp.finwait (and possibly tcp.closing) can prevent blocking of
such packets.
.It Pa tcp.closed
-The state after one endpoint sends a RST.
+The state after one endpoint sends an RST.
.El
.Pp
ICMP and UDP are handled in a fashion similar to TCP, but with a much more
@@ -221,10 +221,10 @@ Optimize the engine for one of the following network environments:
A normal network environment.
Suitable for almost all networks.
.It Pa high-latency
-A high-latency environment (such as a satellite connection)
+A high-latency environment (such as a satellite connection).
.It Pa satellite
Alias for
-.Pa high-latency
+.Pa high-latency .
.It Pa aggressive
Aggressively expire connections.
This can greatly reduce the memory usage of the firewall at the cost of
@@ -482,12 +482,12 @@ below).
queue std bandwidth 10% cbq(default)
queue http bandwidth 60% priority 2 cbq(borrow red) \\
{ employees, developers }
- queue developers bandwidth 75% cbq(borrow)
- queue employees bandwidth 15%
+ queue developers bandwidth 75% cbq(borrow)
+ queue employees bandwidth 15%
queue mail bandwidth 10% priority 0 cbq(borrow ecn)
queue ssh bandwidth 20% cbq(borrow) { ssh_interactive, ssh_bulk }
- queue ssh_interactive priority 7
- queue ssh_bulk priority 0
+ queue ssh_interactive priority 7
+ queue ssh_bulk priority 0
block return out on dc0 inet all queue std
pass out on dc0 inet proto tcp from $developerhosts to any port 80 \\
@@ -850,7 +850,7 @@ Flag SYN is set.
The other flags are ignored.
.It Pa flags S/SA
Out of SYN and ACK, exactly SYN may be set.
-SYN, SYN+PSH, SYN+RST match, but SYN+ACK, ACK and ACK+RST do not.
+SYN, SYN+PSH and SYN+RST match, but SYN+ACK, ACK and ACK+RST do not.
This is more restrictive than the previous example.
.It Pa flags /SFRA
If the first set is not specified, it defaults to none.
@@ -1128,7 +1128,7 @@ For instance:
.Ed
.Pp
This ruleset blocks everything by default.
-Only outgoing connections and incoming connection to port 25 are allowed.
+Only outgoing connections and incoming connections to port 25 are allowed.
The initial packet of each connection has the SYN flag set, will be passed
and creates state.
All further packets of these connections are passed if they match a state.
@@ -1162,9 +1162,8 @@ For example,
pass out inet proto icmp all icmp-type echoreq keep state
.Ed
.Pp
-allows echo requests,
-e.g as created by
-.Xr ping 8 ,
+allows echo requests (such as those created by
+.Xr ping 8 )
out, creates state, and matches incoming echo replies correctly to states.
.Pp
Note:
@@ -1211,7 +1210,7 @@ shift the sequencing of each side of a connection
.Po
add a random number to each side.
.Pc
-Both sides of the connection will notice, that its peer has suddenly
+Both sides of the connection will notice that its peer has suddenly
shifted its sequence by a random amount.
Neither side
will be able to recover and the connection will stall and eventually close.
@@ -1320,7 +1319,7 @@ For instance, the rule
.Ed
.Pp
never applies to a fragment, even if the fragment is part of a TCP
-packet with destination port 80, because without reassembly, this information
+packet with destination port 80, because without reassembly this information
is not available for each fragment.
This also means that fragments cannot create new or match existing
state table entries, which makes stateful filtering and address
diff --git a/share/man/man5/resolv.conf.5 b/share/man/man5/resolv.conf.5
index 49053e19b72..af31b6229d3 100644
--- a/share/man/man5/resolv.conf.5
+++ b/share/man/man5/resolv.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: resolv.conf.5,v 1.19 2001/10/04 10:28:20 wilfried Exp $
+.\" $OpenBSD: resolv.conf.5,v 1.20 2003/01/21 19:59:09 jmc Exp $
.\" $NetBSD: resolv.conf.5,v 1.7 1996/03/06 18:22:16 scottr Exp $
.\"
.\" Copyright (c) 1986, 1991 The Regents of the University of California.
@@ -167,7 +167,7 @@ attach OPT pseudo-RR for ENDS0 extension specified in RFC2671,
to inform DNS server of our receive buffer size.
The option will allow DNS servers to take advantage of non-default receive
buffer size, and to send larger replies.
-DNS query packets with EDNS0 extension is not compatible with
+DNS query packets with EDNS0 extension are not compatible with
non-EDNS0 DNS servers.
The option must be used only when all the DNS servers listed in
.Sy nameserver
@@ -180,7 +180,7 @@ Use of this option is discouraged, and meaningless on
.Ox .
.It Sy insecure1
Do not require IP source address on the reply packet to be equal to the
-servers' address.
+server's address.
.It Sy insecure2
Do not check if the query section of the reply packet is equal
to that of the query packet.