diff options
Diffstat (limited to 'usr/src/man/man1m/ipf.1m')
| -rw-r--r-- | usr/src/man/man1m/ipf.1m | 12 |
1 files changed, 2 insertions, 10 deletions
diff --git a/usr/src/man/man1m/ipf.1m b/usr/src/man/man1m/ipf.1m index 5797e8c28e..121556e83c 100644 --- a/usr/src/man/man1m/ipf.1m +++ b/usr/src/man/man1m/ipf.1m @@ -3,11 +3,10 @@ .\" location. .\" Portions Copyright (c) 2009, Sun Microsystems Inc. All Rights Reserved. .\" Portions Copyright (c) 2015, Joyent, Inc. -.TH IPF 1M "April 9, 2016" +.TH IPF 1M "May 17, 2020" .SH NAME ipf \- alter packet filtering lists for IP packet input and output .SH SYNOPSIS -.LP .nf \fBipf\fR [\fB-6AdDEGInoPRrsvVyzZ\fR] [\fB-l\fR block | pass | nomatch] [\fB-T\fR \fIoptionlist\fR] [\fB-F\fR i | o | a | s | S] \fB-f\fR \fIfilename\fR @@ -15,7 +14,6 @@ ipf \- alter packet filtering lists for IP packet input and output .fi .SH DESCRIPTION -.LP The \fBipf\fR utility is part of a suite of commands associated with the Solaris IP Filter feature. See \fBipfilter\fR(5). .sp @@ -34,7 +32,6 @@ matching the order in which they appear when given to \fBipf\fR. \fB/dev/ipl\fR, and \fB/dev/ipstate\fR. The default permissions of these files require \fBipf\fR to be run as root for all operations. .SS "Enabling Solaris IP Filter Feature" -.LP Solaris IP Filter is installed with the Solaris operating system. However, packet filtering is not enabled by default. Use the following procedure to activate the Solaris IP Filter feature. @@ -61,7 +58,7 @@ See \fBipnat\fR(4). 4. (Optional) Create an address pool configuration file. See \fBippool\fR(4). .sp -Create an \fBipool.conf\fR file if you want to refer to a group of addresses as +Create an \fBippool.conf\fR file if you want to refer to a group of addresses as a single address pool. If you want the address pool configuration file to be loaded at boot time, create a file called \fB/etc/ipf/ippool.conf\fR in which to put the address pool. If you do not want the address pool configuration file @@ -158,7 +155,6 @@ If you reboot your system, the IPfilter configuration is automatically activated. .RE .SH OPTIONS -.LP The following options are supported: .sp .ne 2 @@ -469,7 +465,6 @@ affect fragment or state statistics. .RE .SH ZONES -.LP Each non-global zone has two ipfilter instances: the in-zone ipfilter, which can be controlled from both the zone itself and the global zone, and the Global Zone-controlled (GZ-controlled) instance, which can only be controlled @@ -525,7 +520,6 @@ Contains numerous IP Filter examples. .RE .SH ATTRIBUTES -.LP See \fBattributes\fR(5) for descriptions of the following attributes: .sp @@ -540,7 +534,6 @@ Interface Stability Committed .TE .SH SEE ALSO -.LP \fBipfstat\fR(1M), \fBipmon\fR(1M), \fBipnat\fR(1M), \fBippool\fR(1M), \fBsvcadm\fR(1M), \fBsvc.ipfd\fR(1M), \fBipf\fR(4), \fBipnat\fR(4), \fBippool\fR(4), \fBattributes\fR(5), \fBipfilter\fR(5), \fBzones(5)\fR @@ -548,6 +541,5 @@ Interface Stability Committed .LP \fI\fR .SH DIAGNOSTICS -.LP Needs to be run as root for the packet filtering lists to actually be affected inside the kernel. |