diff options
author | Jason McIntyre <jmc@cvs.openbsd.org> | 2003-01-21 19:59:10 +0000 |
---|---|---|
committer | Jason McIntyre <jmc@cvs.openbsd.org> | 2003-01-21 19:59:10 +0000 |
commit | 1908f8cbef776236c874cdacbe9591ac4bd8fcf0 (patch) | |
tree | 60b6a5651914340f2c2ce5bf0776db59ecb014ea /share | |
parent | 4d00ed48595105f2f08ef55cb2ed68e4c9d33019 (diff) |
typos;
ok deraadt@
Diffstat (limited to 'share')
-rw-r--r-- | share/man/man5/passwd.5 | 4 | ||||
-rw-r--r-- | share/man/man5/pf.conf.5 | 31 | ||||
-rw-r--r-- | share/man/man5/resolv.conf.5 | 6 |
3 files changed, 20 insertions, 21 deletions
diff --git a/share/man/man5/passwd.5 b/share/man/man5/passwd.5 index 447d40b82fa..4b564d4c29f 100644 --- a/share/man/man5/passwd.5 +++ b/share/man/man5/passwd.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: passwd.5,v 1.23 2002/03/27 18:10:38 millert Exp $ +.\" $OpenBSD: passwd.5,v 1.24 2003/01/21 19:59:09 jmc Exp $ .\" $NetBSD: passwd.5,v 1.4 1995/07/28 06:46:05 phil Exp $ .\" .\" Copyright (c) 1988, 1991, 1993 @@ -234,7 +234,7 @@ or .Ar gid fields, the specified numbers will override the information retrieved from the YP maps. -As well, if the +Additionally, if the .Ar gecos , .Ar dir , or diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index c08abfddfc2..bab0f063edc 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.165 2003/01/15 23:19:19 henning Exp $ +.\" $OpenBSD: pf.conf.5,v 1.166 2003/01/21 19:59:09 jmc Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -48,7 +48,7 @@ User-defined variables may be defined and later used, simplifying the configuration file. .It Options Options tune the behaviour of the packet filtering engine. -.It Traffic Normalization (e.g. Pa scrub No ) +.It Traffic Normalization (e.g. Pa scrub Ns ) Traffic normalization protects internal machines against inconsistencies in Internet protocols and implementations. .It Queueing @@ -135,7 +135,7 @@ the connection. Increasing tcp.finwait (and possibly tcp.closing) can prevent blocking of such packets. .It Pa tcp.closed -The state after one endpoint sends a RST. +The state after one endpoint sends an RST. .El .Pp ICMP and UDP are handled in a fashion similar to TCP, but with a much more @@ -221,10 +221,10 @@ Optimize the engine for one of the following network environments: A normal network environment. Suitable for almost all networks. .It Pa high-latency -A high-latency environment (such as a satellite connection) +A high-latency environment (such as a satellite connection). .It Pa satellite Alias for -.Pa high-latency +.Pa high-latency . .It Pa aggressive Aggressively expire connections. This can greatly reduce the memory usage of the firewall at the cost of @@ -482,12 +482,12 @@ below). queue std bandwidth 10% cbq(default) queue http bandwidth 60% priority 2 cbq(borrow red) \\ { employees, developers } - queue developers bandwidth 75% cbq(borrow) - queue employees bandwidth 15% + queue developers bandwidth 75% cbq(borrow) + queue employees bandwidth 15% queue mail bandwidth 10% priority 0 cbq(borrow ecn) queue ssh bandwidth 20% cbq(borrow) { ssh_interactive, ssh_bulk } - queue ssh_interactive priority 7 - queue ssh_bulk priority 0 + queue ssh_interactive priority 7 + queue ssh_bulk priority 0 block return out on dc0 inet all queue std pass out on dc0 inet proto tcp from $developerhosts to any port 80 \\ @@ -850,7 +850,7 @@ Flag SYN is set. The other flags are ignored. .It Pa flags S/SA Out of SYN and ACK, exactly SYN may be set. -SYN, SYN+PSH, SYN+RST match, but SYN+ACK, ACK and ACK+RST do not. +SYN, SYN+PSH and SYN+RST match, but SYN+ACK, ACK and ACK+RST do not. This is more restrictive than the previous example. .It Pa flags /SFRA If the first set is not specified, it defaults to none. @@ -1128,7 +1128,7 @@ For instance: .Ed .Pp This ruleset blocks everything by default. -Only outgoing connections and incoming connection to port 25 are allowed. +Only outgoing connections and incoming connections to port 25 are allowed. The initial packet of each connection has the SYN flag set, will be passed and creates state. All further packets of these connections are passed if they match a state. @@ -1162,9 +1162,8 @@ For example, pass out inet proto icmp all icmp-type echoreq keep state .Ed .Pp -allows echo requests, -e.g as created by -.Xr ping 8 , +allows echo requests (such as those created by +.Xr ping 8 ) out, creates state, and matches incoming echo replies correctly to states. .Pp Note: @@ -1211,7 +1210,7 @@ shift the sequencing of each side of a connection .Po add a random number to each side. .Pc -Both sides of the connection will notice, that its peer has suddenly +Both sides of the connection will notice that its peer has suddenly shifted its sequence by a random amount. Neither side will be able to recover and the connection will stall and eventually close. @@ -1320,7 +1319,7 @@ For instance, the rule .Ed .Pp never applies to a fragment, even if the fragment is part of a TCP -packet with destination port 80, because without reassembly, this information +packet with destination port 80, because without reassembly this information is not available for each fragment. This also means that fragments cannot create new or match existing state table entries, which makes stateful filtering and address diff --git a/share/man/man5/resolv.conf.5 b/share/man/man5/resolv.conf.5 index 49053e19b72..af31b6229d3 100644 --- a/share/man/man5/resolv.conf.5 +++ b/share/man/man5/resolv.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: resolv.conf.5,v 1.19 2001/10/04 10:28:20 wilfried Exp $ +.\" $OpenBSD: resolv.conf.5,v 1.20 2003/01/21 19:59:09 jmc Exp $ .\" $NetBSD: resolv.conf.5,v 1.7 1996/03/06 18:22:16 scottr Exp $ .\" .\" Copyright (c) 1986, 1991 The Regents of the University of California. @@ -167,7 +167,7 @@ attach OPT pseudo-RR for ENDS0 extension specified in RFC2671, to inform DNS server of our receive buffer size. The option will allow DNS servers to take advantage of non-default receive buffer size, and to send larger replies. -DNS query packets with EDNS0 extension is not compatible with +DNS query packets with EDNS0 extension are not compatible with non-EDNS0 DNS servers. The option must be used only when all the DNS servers listed in .Sy nameserver @@ -180,7 +180,7 @@ Use of this option is discouraged, and meaningless on .Ox . .It Sy insecure1 Do not require IP source address on the reply packet to be equal to the -servers' address. +server's address. .It Sy insecure2 Do not check if the query section of the reply packet is equal to that of the query packet. |