From nobody Mon Oct 02 09:10:00 2023 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4RzZsj2Y13z4vq41; Mon, 2 Oct 2023 09:10:01 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4RzZsj0KyWz4PC1; Mon, 2 Oct 2023 09:10:01 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1696237801; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=0N4ghL047wj8eFjwSB4kbhjMigT4MSk8p8dXv9R1jdc=; b=q0UuK1Y3+MnV+WiI1Mq6rYehNpxzq+tIjPMcAVBCV+rGyzFjgJcW3Sj0jgvFu8RxHtIy3e Y60QZRCENM7F87QzcMpS/bK3lGfH1wVHqKRqialk/XJA0WMX7+kcTnt/zc6f4TZXBN2h5E TPA7FBN1Ulz/FI3z3dJ5x7W07Uw6I3ZOUfCMp/3JT6qtMk5+QBGUjQkl5VMeMkbCKB1bB0 Q1A8CTbiA9NiIyc1k2c8K97jYwBeu4CEKm7ehROBva2tDdG9RYoGt4+M3eyQFM8qn4PQFH FN0M4MMBUu/iQtR16xm6GpmDVLEzfpWs8/42/I4qHTbVwM/eTd0kYEzgJiKz7g== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1696237801; a=rsa-sha256; cv=none; b=Q5M2T2Xrevz9WoI8h02y32F+ImZUp4hIFwhAP4WsIURKCXMtgvTNb3dT+SQcnOCm2IhqvF VTzKCj9O/UBum0+3MQ1mm/9hA9MBSzi8GYodPyKYRHbXXgt3qGm228RbtuPlNX/WXbtmHf OEvZH02IwdouxdQndFzUcdVLX2MqLndlrvFvU+TEboeOddrBGxrD6NE7nLPz+2rI29biir Ko/qiv3JNxpCBwyUBeRYGEMc2mEjlY7FMQUIX7AnH9nws2pS5KtziJxGKz0msnmwUSWsmX 49r8RpbwerbD7qJt0hgFE4IYt65MWlEdOG/YkC1yL+6SFMhZUiLXSc7J0cQQtg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1696237801; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=0N4ghL047wj8eFjwSB4kbhjMigT4MSk8p8dXv9R1jdc=; b=XROR4BiF6cMglp/ek1oZEki5E2TBhooDVLgo4DJYKZ8lqcMjK9lxSwrCFmcT9l/oqHhUp/ IyDsHCleAWLh3A5HqpuIF1eryXFBxb+ePrZDGbau682MlUmcXj3pRfoUoHqw+ASQndmUry 4yNSFxPCev85ez2N4ak9s/PSXvsSmIKVhW9Af4kgFdU3m3Z53ugISXH5A5PZaAEzN7LlLr ESLEN8MT3aOZ5rv4Z+8AN7iyMoMaE8pCf+EskMpnSwptCEBDz9GEfyXOz28L5rekxsOpX+ DlgPZO+LILnr0WGP/3so5DCQB+jdIv7kr2/2Wizr2tPY2lZnsbPLlmYfnNWnXA== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4RzZsh6Y2xz15h5; Mon, 2 Oct 2023 09:10:00 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.17.1/8.17.1) with ESMTP id 3929A0x2055590; Mon, 2 Oct 2023 09:10:00 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.17.1/8.17.1/Submit) id 3929A0SH055587; Mon, 2 Oct 2023 09:10:00 GMT (envelope-from git) Date: Mon, 2 Oct 2023 09:10:00 GMT Message-Id: <202310020910.3929A0SH055587@gitrepo.freebsd.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org From: Zhenlei Huang Subject: git: 6b8183c70caa - stable/12 - ipfw.8: Adjust section for loader tunables List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-src-all@freebsd.org X-BeenThere: dev-commits-src-all@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: zlei X-Git-Repository: src X-Git-Refname: refs/heads/stable/12 X-Git-Reftype: branch X-Git-Commit: 6b8183c70caaa4c8b29e8528d86ff99616da4d47 Auto-Submitted: auto-generated The branch stable/12 has been updated by zlei: URL: https://cgit.FreeBSD.org/src/commit/?id=6b8183c70caaa4c8b29e8528d86ff99616da4d47 commit 6b8183c70caaa4c8b29e8528d86ff99616da4d47 Author: Zhenlei Huang AuthorDate: 2023-09-28 04:58:44 +0000 Commit: Zhenlei Huang CommitDate: 2023-10-02 09:08:55 +0000 ipfw.8: Adjust section for loader tunables Move the descriptions of loader tunables from section 'SYSCTL VARIABLES' to section 'LOADER TUNABLES'. See also 49197c391b3d (ipfw: Add sysctl flag CTLFLAG_TUN to loader tunables). MFC after: 2 days Differential Revision: https://reviews.freebsd.org/D41981 (cherry picked from commit 12349f38898f231ca803dcf526bac88cb1b5cd2b) (cherry picked from commit bb6f9a95402a6c3ab8167481b81465f8ad5016fc) (cherry picked from commit e31a331ddda6ffcb711bb950794be5d53e537e2a) --- sbin/ipfw/ipfw.8 | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/sbin/ipfw/ipfw.8 b/sbin/ipfw/ipfw.8 index 512ad5baf90e..cdf9cc29fe3b 100644 --- a/sbin/ipfw/ipfw.8 +++ b/sbin/ipfw/ipfw.8 @@ -1,7 +1,7 @@ .\" .\" $FreeBSD$ .\" -.Dd April 25, 2023 +.Dd September 28, 2023 .Dt IPFW 8 .Os .Sh NAME @@ -3683,6 +3683,16 @@ or .Xr kenv 1 before ipfw module gets loaded. .Bl -tag -width indent +.It Va net.inet.ip.fw.enable : No 1 +Enables the firewall. +Setting this variable to 0 lets you run your machine without +firewall even if compiled in. +.It Va net.inet6.ip6.fw.enable : No 1 +provides the same functionality as above for the IPv6 case. +.It Va net.link.ether.ipfw : No 0 +Controls whether layer2 packets are passed to +.Nm . +Default is no. .It Va net.inet.ip.fw.default_to_accept : No 0 Defines ipfw last rule behavior. This value overrides @@ -4076,12 +4086,6 @@ Keep dynamic states on rule/set deletion. States are relinked to default rule (65535). This can be handly for ruleset reload. Turned off by default. -.It Va net.inet.ip.fw.enable : No 1 -Enables the firewall. -Setting this variable to 0 lets you run your machine without -firewall even if compiled in. -.It Va net.inet6.ip6.fw.enable : No 1 -provides the same functionality as above for the IPv6 case. .It Va net.inet.ip.fw.one_pass : No 1 When set, the packet exiting from the .Nm dummynet @@ -4098,10 +4102,6 @@ Enables verbose messages. Limits the number of messages produced by a verbose firewall. .It Va net.inet6.ip6.fw.deny_unknown_exthdrs : No 1 If enabled packets with unknown IPv6 Extension Headers will be denied. -.It Va net.link.ether.ipfw : No 0 -Controls whether layer2 packets are passed to -.Nm . -Default is no. .It Va net.link.bridge.ipfw : No 0 Controls whether bridged packets are passed to .Nm .