diff options
Diffstat (limited to 'share/man/man4/bridge.4')
| -rw-r--r-- | share/man/man4/bridge.4 | 45 |
1 files changed, 22 insertions, 23 deletions
diff --git a/share/man/man4/bridge.4 b/share/man/man4/bridge.4 index 25698d08e93..a1608fcf2c4 100644 --- a/share/man/man4/bridge.4 +++ b/share/man/man4/bridge.4 @@ -1,4 +1,4 @@ -.\" $OpenBSD: bridge.4,v 1.31 2001/06/23 07:19:32 angelos Exp $ +.\" $OpenBSD: bridge.4,v 1.32 2001/06/26 23:24:10 angelos Exp $ .\" .\" Copyright (c) 1999, 2000 Jason L. Wright (jason@thought.net) .\" All rights reserved. @@ -52,10 +52,9 @@ a transparent filter for .Xr ip 4 datagrams. .Pp -.\"XXX - replace with ipfw when it is in-tree -.\"The bridges provided by this interface are learning bridges with -.\"IP filtering, see -..\"Xr ipf 4 . +The bridges provided by this interface are learning bridges with +filtering, see +.Xr pf 4 . In general a bridge works like a hub, forwarding traffic from one interface to another. It differs from a hub in that it will "learn" which machines @@ -80,17 +79,18 @@ bridge will forward the packet only to the destination segment. If the destination is on the same segment as the origin segment, the bridge will drop the packet because the receiver has already had a chance to see the frame. -.\"XXX - replace with ipfw when it is in-tree -.\"Before forwarding a frame, the bridge will check to see if the packet -.\"contains an -.\".Xr ip 4 -.\"datagram; if so, the datagram is run through the -.\".Xr ipf 4 -.\"interface so that it can be filtered. -.\"Only the -.\".Xr ipf 4 -.\"input rules for the source interface are checked with the datagram; -.\"output rules have no effect. +Before forwarding a frame, the bridge will check to see if the packet +contains an +.Xr ip 4 +or +.Xr ip 6 +datagram; if so, the datagram is run through the +.Xr pf 4 +interface so that it can be filtered. +Only the +.Xr pf 4 +input rules for the source interface are checked with the datagram; +output rules have no effect. .Sh IOCTLS A .Nm @@ -540,10 +540,9 @@ command and the .Xr bridge 4 kernel interface first appeared in .Ox 2.5 . -.\".Sh BUGS -.\"XXX - replace with ipfw when it is in-tree -.\".Pp -.\"Only -.\".Xr ipf 4 -.\"input rules are checked with incoming packet; there is no easy way to -.\"handle output rules. +.Sh BUGS +.Pp +Only +.Xr pf 4 +input rules are checked with incoming packets; there is no easy way to +handle output rules. |