From nobody Mon Nov 04 15:56:35 2024 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Xhx0g4CBjz5cFX5; Mon, 04 Nov 2024 15:56:35 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R10" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Xhx0g3XbCz4k8B; Mon, 4 Nov 2024 15:56:35 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1730735795; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=pXVrxJ8SuowBigRYQud7/4cR3G9Li+te6xNKLXrPOMQ=; b=Kc2uJbM7qOg8cXyeRg4Ih3tUdc57hk7okA7Sa4UzphVn2FXJ7e6RD5iBKAAONOTeJVQewo 22V5w8zSoFWeoYe2vnk6DbVsNr9k1haevN4/AIGbDcxxUKrwoJ5Pxl7GLHLgBwSsuAVoKV jTLgr6gAaIg5ex8jqj4Qgwf7Lw1T6tPUFnTbPw3Ffj5Y/c/f+GQWX+HjLuokNQ5ogmv3N6 nQiEG5UCtq5ulNV1oe5IVKBDFXJJTIUZXvqM+On7IY5vo+GCNP5SZVXgHwhp5y9ZCfO1gQ WVqsjt9WPRwErxQv9cAiMYt/LwpDvW6UYF8MyrT7yeCxtbSjPoHllV3DD2DZiw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1730735795; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=pXVrxJ8SuowBigRYQud7/4cR3G9Li+te6xNKLXrPOMQ=; b=t8B0CJTqQUX5aTA3OJQi8PdmCbFguNqmKAeQMZ+5CqXGGAiBJ3W8+gzv+iIQKXlY4ECikt ewDkBiJJ+mNhrLXPeny9Kc7nbiw0SWQHPSx4IqlBUwcf5TzTJjUG+Y+h85bOKg53sC4Jr3 EJfO0FVmRDUrLS+4h1bM/YnsxzamDGvwY+iRDRT4Hvhfa+oubDkCbcFDAO48uRUNzkqilX 7zrY2L9fD9Du49KjThKgQaVex2G2gOJSQB6csqipAY4OebwF1IccBzEfepd2heUonCxL+o U/Rv76+lhk2GwEHm9YbtRJz4dRP1Pcv2afOqrSoXtktPlp+3sg+5HWPck+Hjug== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1730735795; a=rsa-sha256; cv=none; b=yp3tBtFyOWniOgI14LyeokwjEwZAZW47vWhJb6RrnhWzRdFVYgag5JFX+eQ8lmDbXovPZk uKKb1FDH1m7U9IfQG6iNM7YfRG+HfrouDGxpITxRzwCOZ62O9niiMGHtvNSPiWLPvAjyPq xW0NcQqm/edyajtEPZ0+IOqMz+es4hXhE3IGiTLRuQbhOprYsmlS9ZvEBag+geNL19JQo7 flypGpp7csitTXRiIqUhfkvrGQO3nElZ4aZ1MROnTpdabRTGFdg2F1zEL2Cs4bodMyijgD 6k4PdHf9WEKtRw85wVGLdpS7UdBG/o7BwqYtgClyRxFojzj04SkQDCVw+Y3WLw== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4Xhx0g38J7zfx1; Mon, 4 Nov 2024 15:56:35 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 4A4FuZGc071962; Mon, 4 Nov 2024 15:56:35 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 4A4FuZET071959; Mon, 4 Nov 2024 15:56:35 GMT (envelope-from git) Date: Mon, 4 Nov 2024 15:56:35 GMT Message-Id: <202411041556.4A4FuZET071959@gitrepo.freebsd.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org From: Mitchell Horne Subject: git: 5b9e1a3ac18a - stable/14 - ipf.5: revert C style(9) applied to man page List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: mhorne X-Git-Repository: src X-Git-Refname: refs/heads/stable/14 X-Git-Reftype: branch X-Git-Commit: 5b9e1a3ac18a3868b7594d6bba455dea29a29e7d Auto-Submitted: auto-generated The branch stable/14 has been updated by mhorne: URL: https://cgit.FreeBSD.org/src/commit/?id=5b9e1a3ac18a3868b7594d6bba455dea29a29e7d commit 5b9e1a3ac18a3868b7594d6bba455dea29a29e7d Author: Graham Percival AuthorDate: 2024-09-24 17:11:33 +0000 Commit: Mitchell Horne CommitDate: 2024-11-04 15:56:24 +0000 ipf.5: revert C style(9) applied to man page These changes were made by accident in: ipfilter: Adjust userland returns to conform to style(9) 2582ae5740181e0d2bab10003d66ae91c9b56329 That commit made similar mistakes in other man pages, but those have already been fixed. Signed-off-by: Graham Percival Reviewed by: mhorne Sponsored by: Tarsnap Backup Inc. Pull Request: https://github.com/freebsd/freebsd-src/pull/1433 (cherry picked from commit ce251baf42f32317b4b4ef60203d6f47204c47e9) --- sbin/ipf/ipf/ipf.5 | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/sbin/ipf/ipf/ipf.5 b/sbin/ipf/ipf/ipf.5 index 79e6b2c45b05..8d2f6f58379b 100644 --- a/sbin/ipf/ipf/ipf.5 +++ b/sbin/ipf/ipf/ipf.5 @@ -223,7 +223,7 @@ To address this problem, a block rule can be qualified in two ways. The first of these is specific to TCP and instructs IPFilter to send back a reset (RST) packet. This packet indicates to the remote system that the packet it sent has been rejected and that it shouldn't make any further -attempts( to send packets to that port. Telling IPFilter to return a TCP); +attempts to send packets to that port. Telling IPFilter to return a TCP RST packet in response to something that has been received is achieved with the return-rst keyword like this: .PP @@ -239,18 +239,18 @@ For all of the other protocols handled by the IP protocol suite, to send back an error indicating that the received packet was dropped requires sending back an ICMP error packet. Whilst these can also be used for TCP, the sending host may not treat the received ICMP error as a hard error -in( the same way as it does the TCP RST packet. To return an ICMP error); +in the same way as it does the TCP RST packet. To return an ICMP error it is necessary to place return-icmp after the block keyword like this: .PP .nf block return-icmp in proto udp from any to 192.168.0.1/24 .fi .PP -When( electing to return an ICMP error packet, it is also possible to); +When electing to return an ICMP error packet, it is also possible to select what type of ICMP error is returned. Whilst the full compliment of ICMP unreachable codes can be used by specifying a number instead of the string below, only the following should be used in conjunction with -return-icmp.( Which return code to use is a choice to be made when); +return-icmp. Which return code to use is a choice to be made when weighing up the pro's and con's. Using some of the codes may make it more obvious that a firewall is being used rather than just the host not responding.