diff options
| author | Andre Oppermann <andre@FreeBSD.org> | 2005-03-02 19:50:12 +0000 |
|---|---|---|
| committer | Andre Oppermann <andre@FreeBSD.org> | 2005-03-02 19:50:12 +0000 |
| commit | d2c9038812184aa8abd590704225431cb44b53f0 (patch) | |
| tree | 74c4ede8a2cda012ec60758d9a078f457e3a4617 /sbin | |
| parent | 4163bf024756679e370b4939a36b83f066c61a42 (diff) | |
Notes
Diffstat (limited to 'sbin')
| -rw-r--r-- | sbin/ipfw/ipfw.8 | 15 |
1 files changed, 14 insertions, 1 deletions
diff --git a/sbin/ipfw/ipfw.8 b/sbin/ipfw/ipfw.8 index 8236e67b3e1a2..b063226682560 100644 --- a/sbin/ipfw/ipfw.8 +++ b/sbin/ipfw/ipfw.8 @@ -1,7 +1,7 @@ .\" .\" $FreeBSD$ .\" -.Dd September 19, 2004 +.Dd March 2, 2005 .Dt IPFW 8 .Os .Sh NAME @@ -633,6 +633,19 @@ This makes the .Xr netstat 1 entry look rather weird but is intended for use with transparent proxy servers. +.Pp +To enable +.Cm fwd +a custom kernel needs to be compiled with the option +.Cd "options IPFIREWALL_FORWARD" . +With the additional option +.Cd "options IPFIREWALL_FORWARD_EXTENDED" +all safeguards are removed and it also makes it possible to redirect +packets destined to locally configured IP addresses. +Please note that such rules apply to locally generated packets as +well and great care is required to ensure proper behaviour for +automatically generated packets like ICMP message size exceeded +and others. .It Cm pipe Ar pipe_nr Pass packet to a .Xr dummynet 4 |
