diff options
author | Jun-ichiro itojun Hagino <itojun@cvs.openbsd.org> | 2000-09-16 10:33:47 +0000 |
---|---|---|
committer | Jun-ichiro itojun Hagino <itojun@cvs.openbsd.org> | 2000-09-16 10:33:47 +0000 |
commit | 473e19e7aadcf230b532ef89a23abecd0dd16d7e (patch) | |
tree | fc62ad12b4fcd6bea443dd76dacea4c8a958bf0e /usr.sbin/faithd/faithd.8 | |
parent | fd36f40874ca6eea7f7cc63322623c8cb2b89671 (diff) |
synchronize with latest kame.
- improve exit code and logging.
- repair multicast address rejection (IN_MULTICAST takes host endian value)
- repair ftp relaying, when the result of PASV does not have paren.
- repair ftp relaying, when EPSV is sent from client.
Diffstat (limited to 'usr.sbin/faithd/faithd.8')
-rw-r--r-- | usr.sbin/faithd/faithd.8 | 119 |
1 files changed, 63 insertions, 56 deletions
diff --git a/usr.sbin/faithd/faithd.8 b/usr.sbin/faithd/faithd.8 index d84cb3d8f2f..af7c985dc2d 100644 --- a/usr.sbin/faithd/faithd.8 +++ b/usr.sbin/faithd/faithd.8 @@ -1,5 +1,5 @@ -.\" $OpenBSD: faithd.8,v 1.7 2000/07/03 06:44:46 itojun Exp $ -.\" $KAME: faithd.8,v 1.11 2000/07/03 06:35:25 jinmei Exp $ +.\" $OpenBSD: faithd.8,v 1.8 2000/09/16 10:33:44 itojun Exp $ +.\" $KAME: faithd.8,v 1.14 2000/09/12 05:20:35 itojun Exp $ .\" .\" Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project. .\" All rights reserved. @@ -37,35 +37,20 @@ .Sh SYNOPSIS .Nm .Op Fl dp -.Op Ar service Op Ar serverpath Op Ar serverargs +.Ar service +.Op Ar serverpath Op Ar serverargs +.Nm "" .Sh DESCRIPTION .Nm -provides IPv6/v4 TCP relay for the specified -.Ar service . -.Pp +provides IPv6-to-IPv4 TCP relay. .Nm -must be invoked on IPv4/v6 dual stack router. -The router must be configured to capture all the TCP traffic -toward reserved -.Tn IPv6 -address prefix, by using -.Xr route 8 -and -.Xr sysctl 8 -commands. -.Nm -will daemonize itself on invocation. +must be used on an IPv4/v6 dual stack router. .Pp +When .Nm -will listen to +receives .Tn TCPv6 -port -.Ar service . -If -.Tn TCPv6 -traffic to port -.Ar service -is found, +traffic, .Nm will relay the .Tn TCPv6 @@ -87,20 +72,48 @@ destination address is the traffic will be relayed to IPv4 destination .Li 10.1.1.1 . .Pp -If -.Ar service -is not given, -.Li telnet -is assumed, and +To use .Nm -will relay TCP traffic on TCP port -.Li telnet . -With -.Ar service , +translation service, +an IPv6 address prefix must be reserved for mapping IPv4 addresses into. +Kernel must be properly configured to route all the TCP connection +toward the reserved IPv6 address prefix into the +.Xr faith 4 +pseudo interface, by using +.Xr route 8 +command. +Also, +.Xr sysctl 8 +should be used to configure +.Dv net.inet6.ip6.keepfaith +to +.Dv 1 . +.Pp +The router must be configured to capture all the TCP traffic +toward reserved +.Tn IPv6 +address prefix, by using +.Xr route 8 +and +.Xr sysctl 8 +commands. +.\".Ss Daemon mode +When +.Nm +.\"is invoked as a standalone program, +is invoked, .Nm -will work as TCP relaying daemon for specified +will daemonize itself. +.Nm +will listen to +.Tn TCPv6 +port +.Ar service . +If +.Tn TCPv6 +traffic to port .Ar service -as described above. +is found, it relays the connection. .Pp Since .Nm @@ -125,23 +138,6 @@ You can also specify .Ar serverargs for the arguments for the local daemon. .Pp -To use -.Nm -translation service, -an IPv6 address prefix must be reserved for mapping IPv4 addresses into. -Kernel must be properly configured to route all the TCP connection -toward the reserved IPv6 address prefix into the -.Dv faith -pseudo interface, by using -.Xr route 8 -command. -Also, -.Xr sysctl 8 -should be used to configure -.Dv net.inet6.ip6.keepfaith -to -.Dv 1 . -.Pp If .Fl d is given, debugging information will be generated using @@ -191,7 +187,15 @@ Before invoking .Nm Ns , .Xr faith 4 interface has to be configured properly. -.Pp +.Bd -literal -offset +# sysctl -w net.inet6.ip6.accept_rtadv=0 +# sysctl -w net.inet6.ip6.forwarding=1 +# sysctl -w net.inet6.ip6.keepfaith=1 +# ifconfig faith0 up +# route add -inet6 3ffe:501:4819:ffff:: -prefixlen 96 ::1 +# route change -inet6 3ffe:501:4819:ffff:: -prefixlen 96 -ifp faith0 +.Ed +.\".Ss Daemon mode samples To translate .Li telnet service, and provide no local telnet service, invoke @@ -206,7 +210,7 @@ If you would like to provide local telnet service via .Xr telnetd 8 on .Pa /usr/libexec/telnetd , -user the following command line: +use the following command line: .Bd -literal -offset # faithd telnet /usr/libexec/telnetd telnetd .Ed @@ -216,7 +220,10 @@ If you would like to pass extra arguments to the local daemon: # faithd ftpd /usr/libexec/ftpd ftpd -l .Ed .Pp -Here are some other examples: +Here are some other examples. +You may need +.Fl p +to translate rsh/rlogin services. .Bd -literal -offset # faithd sshd # faithd login /usr/libexec/rlogin rlogind |