network_cmds-356.9.tar.gz

[apple/network_cmds.git] / ipfw.tproj / ipfw.8

diff --git a/ipfw.tproj/ipfw.8 b/ipfw.tproj/ipfw.8
index 71f6bec8d356ada9537971f3319ed1ef4f2ab224..4136a3fe994bae78d0f63d38ac8b3ce07c0ca73a 100644 (file)
--- a/ipfw.tproj/ipfw.8
+++ b/ipfw.tproj/ipfw.8
@@ -7,6 +7,7 @@
 .Sh NAME
 .Nm ipfw
 .Nd IP firewall and traffic shaper control program
+(DEPRECATED)
 .Sh SYNOPSIS
 .Nm
 .Op Fl cq
@@ -63,38 +64,19 @@
 .Oc
 .Ar pathname
 .Sh DESCRIPTION
+Note that use of this utility is
+.Cm DEPRECATED.
+Please use
+.Xr pfctl 8
+instead.
+.Pp
 The
 .Nm
 utility is the user interface for controlling the
 .Xr ipfw 4
 firewall and the
 .Xr dummynet 4
-traffic shaper in
-.Fx .
-.Pp
-.Bd -ragged -offset XXXX
-.Em NOTE:
-this manual page documents the newer version of
-.Nm
-introduced in
-.Fx
-CURRENT in July 2002, also known as
-.Nm ipfw2 .
-.Nm ipfw2
-is a superset of the old firewall,
-.Nm ipfw1 .
-The differences between the two are listed in Section
-.Sx IPFW2 ENHANCEMENTS ,
-which you are encouraged to read to revise older rulesets and possibly
-write them more efficiently.
-See Section
-.Sx USING IPFW2 IN FreeBSD-STABLE
-for instructions on how to run
-.Nm ipfw2
-on
-.Fx
-STABLE.
-.Ed
+traffic shaper. 
 .Pp
 An
 .Nm
@@ -1584,31 +1566,10 @@ to circumvent firewalls.
 When logging is enabled, these packets are
 reported as being dropped by rule -1.
 .It
-If you are logged in over a network, loading the
-.Xr kld 4
-version of
-.Nm
-is probably not as straightforward as you would think.
-I recommend the following command line:
-.Bd -literal -offset indent
-kldload ipfw && \e
-ipfw add 32000 allow ip from any to any
-.Ed
-.Pp
-Along the same lines, doing an
-.Bd -literal -offset indent
-ipfw flush
-.Ed
-.Pp
-in similar surroundings is also a bad idea.
-.It
 The
 .Nm
 filter list may not be modified if the system security level
-is set to 3 or higher
-(see
-.Xr init 8
-for information on system security levels).
+is set to 3 or higher.
 .El
 .Sh PACKET DIVERSION
 A
@@ -1724,27 +1685,6 @@ Controls whether bridged packets are passed to
 .Nm .
 Default is no.
 .El
-.Sh USING IPFW2 IN FreeBSD-STABLE
-.Nm ipfw2
-is standard in
-.Fx
-CURRENT, whereas
-.Fx
-STABLE still uses
-.Nm ipfw1
-unless the kernel is compiled with
-.Cm options IPFW2 ,
-and
-.Nm /sbin/ipfw
-and
-.Nm /usr/lib/libalias
-are recompiled with
-.Cm -DIPFW2
-and reinstalled (the same effect can be achieved by adding
-.Cm IPFW2=TRUE
-to
-.Nm /etc/make.conf
-before a buildworld).
 .Pp
 .Sh IPFW2 ENHANCEMENTS
 This Section lists the features that have been introduced in
@@ -2103,15 +2043,12 @@ the sleep terminates thus restoring the previous situation.
 .Sh SEE ALSO
 .Xr cpp 1 ,
 .Xr m4 1 ,
-.Xr bridge 4 ,
 .Xr divert 4 ,
 .Xr dummynet 4 ,
 .Xr ip 4 ,
 .Xr ipfirewall 4 ,
 .Xr protocols 5 ,
 .Xr services 5 ,
-.Xr init 8 ,
-.Xr kldload 8 ,
 .Xr reboot 8 ,
 .Xr sysctl 8 ,
 .Xr syslogd 8