docs/53625: Error in ipfw manpage (EXAMPLES/SETS OF RULES)

Kostyuk Oleg cub at cub.org.ua
Mon Jun 23 07:10:17 UTC 2003


>Number:         53625
>Category:       docs
>Synopsis:       Error in ipfw manpage (EXAMPLES/SETS OF RULES)
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-doc
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          doc-bug
>Submitter-Id:   current-users
>Arrival-Date:   Mon Jun 23 00:10:14 PDT 2003
>Closed-Date:
>Last-Modified:
>Originator:     Kostyuk Oleg <cub at cub.org.ua>
>Release:        FreeBSD 5.1-RELEASE i386
>Organization:
>Environment:
System: FreeBSD demani.digma 5.1-RELEASE FreeBSD 5.1-RELEASE #3: Mon Jun 9 12:19:59 EEST 2003 root at demani.digma:/usr/src/sys/i386/compile/CUB i386


>Description:
	The ipfw(8) manpage has an example of using ipfw sets of rules,
        but the example does not work.

>How-To-Repeat:
	Try to execute commands from EXAMPLES/SETS OF RULES manpage section

	# id
	uid=0(root) gid=0(wheel) groups=0(wheel), 5(operator)
        # ipfw disable set 18
        ipfw: unrecognize enable/disable keyword: set

>Fix:
	Patch for manpage
	
	--- /usr/src/sbin/ipfw/ipfw.8   Sat Mar 15 03:13:00 2003
	+++ ipfw.8      Mon Jun 23 09:50:59 2003
	@@ -2001,9 +2001,9 @@
	 .Ss SETS OF RULES
	 To add a set of rules atomically, e.g. set 18:
	 .Pp
	-.Dl "ipfw disable set 18"
	+.Dl "ipfw set disable 18"
	 .Dl "ipfw add NN set 18 ...         # repeat as needed"
	-.Dl "ipfw enable set 18"
	+.Dl "ipfw set enable 18"
	 .Pp
	 To delete a set of rules atomically the command is simply:
	 .Pp
	@@ -2011,9 +2011,9 @@
	 .Pp
	 To test a ruleset and disable it and regain control if something goes wrong:
	 .Pp
	-.Dl "ipfw disable set 18"
	+.Dl "ipfw set disable 18"
	 .Dl "ipfw add NN set 18 ...         # repeat as needed"
	-.Dl "ipfw enable set 18 ; echo done; sleep 30 && ipfw disable set 18"
	+.Dl "ipfw set enable 18 ; echo done; sleep 30 && ipfw set disable 18"
	 .Pp
	 Here if everything goes well, you press control-C before the "sleep"
	 terminates, and your ruleset will be left active. Otherwise, e.g. if

>Release-Note:
>Audit-Trail:
>Unformatted:



More information about the freebsd-doc mailing list