From nobody Tue Sep 24 17:30:32 2024 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4XCn20322Mz5Y54m; Tue, 24 Sep 2024 17:30:32 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4XCn201zDkz4W0G; Tue, 24 Sep 2024 17:30:32 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1727199032; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=Yykni52xMSm+xBnkkkVWxUXFGsUO3xvaoNMSICbRiSk=; b=wCC1CwFoBwR/+YsPl1DYUux16TVo/P1ib2ZuhIUzOW8DGmv5KIiUyEGAEYFTq146VJj/WX rJOM98AI2+WgkeXLxQoe9VqyBHvWSKqlH4EMltpGdCPGbr9ozlp9F3WGGpEeCINWz/S71K RMKQOMcayG0dgAJXgBb/CzzgrMLOUivzncxJ5F24HPGywjJ/EaP5gnoGjQZI4pXibZcn7L 9spfbJW4YRDMs5G6L2Az6axPGmGRe00d/f8Toi4qPbtnRw7SSq7xe1bod7bvCqEpYjXstk OZlSFznPu+37w3F1h1hMW54Tk/P2Be3UW/Yg1+mVcKHTeAJhw4n8FlZNIvLl9Q== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1727199032; a=rsa-sha256; cv=none; b=t1jMWwokzGjnaG1C+43oezzCCKPOulIGZ/G1Vlqhv8VwTKV7Y/au8+N+JRK9kvEQ7GGzBs 2cXM/T8fcvxuvIMmaJo290fURRGLcxYz0iZdYeRS5HW5Ksanw6jXQf6zZKzCZOkfBJH0Cz 7v0hiC63hxSZw+AyJNYffhAsEklVTSrtC3oMcM6+YMd7QpKIor6XHz39KSlusp4vNfk0xM y6/sJd5l57Xu8wMlGUn6syvL8OQw4rVbmgZYz4hAk7Nv3S++K1KmljX0zmA9T2slUA6y9R HBzQTJbVMLt9rBPC1jbwoZUIhnuMRSB+tg/Kd9Jasrxl2697bmLhneKhdYuvUg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1727199032; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=Yykni52xMSm+xBnkkkVWxUXFGsUO3xvaoNMSICbRiSk=; b=b+RSF8M/QKZ5dEBbRRNVIfonpE/Zi7HgpfsxhZfRfzL0SjLAsCQKDWUimcWdq2K5GDVoIa VqGKtSlf/dojNZ9kwe4XpTRV/6NvfbOGZzQaqkX5kpBr1MacO2uo3Mssm9dnSSJEv6I12R JPTea7VdCC8H4hlOQmMhiJxVG4K2KcQ7OjrMtWvbNaBoKHlqNfzNEv93fswQCiBJEWhUMo B+SukMlAxv1S7U96ijL0H08wzVF1/GiHjmZXQ6ITaOxK13EwWLLEatpxIPLg5QAkvWM2Qe Ei9X7OpEQGe1rLlhKntMbPMyP6kzd/lE08ATC+OPtvMvZCYkAefup1fxgIc2QQ== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4XCn201Zt9zdnV; Tue, 24 Sep 2024 17:30:32 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 48OHUWut019664; Tue, 24 Sep 2024 17:30:32 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 48OHUW8F019661; Tue, 24 Sep 2024 17:30:32 GMT (envelope-from git) Date: Tue, 24 Sep 2024 17:30:32 GMT Message-Id: <202409241730.48OHUW8F019661@gitrepo.freebsd.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Mitchell Horne Subject: git: ce251baf42f3 - main - ipf.5: revert C style(9) applied to man page List-Id: Commit messages for the main branch of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-main@freebsd.org Sender: owner-dev-commits-src-main@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: mhorne X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: ce251baf42f32317b4b4ef60203d6f47204c47e9 Auto-Submitted: auto-generated The branch main has been updated by mhorne: URL: https://cgit.FreeBSD.org/src/commit/?id=ce251baf42f32317b4b4ef60203d6f47204c47e9 commit ce251baf42f32317b4b4ef60203d6f47204c47e9 Author: Graham Percival AuthorDate: 2024-09-24 17:11:33 +0000 Commit: Mitchell Horne CommitDate: 2024-09-24 17:29:39 +0000 ipf.5: revert C style(9) applied to man page These changes were made by accident in: ipfilter: Adjust userland returns to conform to style(9) 2582ae5740181e0d2bab10003d66ae91c9b56329 That commit made similar mistakes in other man pages, but those have already been fixed. Signed-off-by: Graham Percival Reviewed by: mhorne Sponsored by: Tarsnap Backup Inc. Pull Request: https://github.com/freebsd/freebsd-src/pull/1433 --- sbin/ipf/ipf/ipf.5 | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/sbin/ipf/ipf/ipf.5 b/sbin/ipf/ipf/ipf.5 index 7fbba17594ba..9cde8be0b1d5 100644 --- a/sbin/ipf/ipf/ipf.5 +++ b/sbin/ipf/ipf/ipf.5 @@ -223,7 +223,7 @@ To address this problem, a block rule can be qualified in two ways. The first of these is specific to TCP and instructs IPFilter to send back a reset (RST) packet. This packet indicates to the remote system that the packet it sent has been rejected and that it shouldn't make any further -attempts( to send packets to that port. Telling IPFilter to return a TCP); +attempts to send packets to that port. Telling IPFilter to return a TCP RST packet in response to something that has been received is achieved with the return-rst keyword like this: .PP @@ -239,18 +239,18 @@ For all of the other protocols handled by the IP protocol suite, to send back an error indicating that the received packet was dropped requires sending back an ICMP error packet. Whilst these can also be used for TCP, the sending host may not treat the received ICMP error as a hard error -in( the same way as it does the TCP RST packet. To return an ICMP error); +in the same way as it does the TCP RST packet. To return an ICMP error it is necessary to place return-icmp after the block keyword like this: .PP .nf block return-icmp in proto udp from any to 192.168.0.1/24 .fi .PP -When( electing to return an ICMP error packet, it is also possible to); +When electing to return an ICMP error packet, it is also possible to select what type of ICMP error is returned. Whilst the full compliment of ICMP unreachable codes can be used by specifying a number instead of the string below, only the following should be used in conjunction with -return-icmp.( Which return code to use is a choice to be made when); +return-icmp. Which return code to use is a choice to be made when weighing up the pro's and con's. Using some of the codes may make it more obvious that a firewall is being used rather than just the host not responding.