svn commit: r240656 - head/sbin/ipfw
Benjamin Kaduk
bjk at FreeBSD.org
Tue Sep 18 16:00:44 UTC 2012
Author: bjk (doc committer)
Date: Tue Sep 18 16:00:44 2012
New Revision: 240656
URL: http://svn.freebsd.org/changeset/base/240656
Log:
Fix grammar in the portion about FIBs. Also, cross-reference
setfib(2) instead of setfib(1) for the 16-FIB limit.
PR: docs/157452
Approved by: hrs (mentor)
Modified:
head/sbin/ipfw/ipfw.8
Modified: head/sbin/ipfw/ipfw.8
==============================================================================
--- head/sbin/ipfw/ipfw.8 Tue Sep 18 15:38:42 2012 (r240655)
+++ head/sbin/ipfw/ipfw.8 Tue Sep 18 16:00:44 2012 (r240656)
@@ -957,25 +957,27 @@ actions.
The packet is tagged so as to use the FIB (routing table)
.Ar fibnum
in any subsequent forwarding decisions.
-Initially this is limited to the values 0 through 15, see
-.Xr setfib 1 .
+In the current implementation, this is limited to the values 0 through 15, see
+.Xr setfib 2 .
Processing continues at the next rule.
It is possible to use the
.Cm tablearg
-keyword with a setfib.
-If tablearg value is not within compiled FIB range packet fib is set to 0.
+keyword with setfib.
+If the tablearg value is not within the compiled range of fibs,
+the packet's fib is set to 0.
.It Cm reass
-Queue and reassemble ip fragments.
+Queue and reassemble IP fragments.
If the packet is not fragmented, counters are updated and
processing continues with the next rule.
If the packet is the last logical fragment, the packet is reassembled and, if
.Va net.inet.ip.fw.one_pass
-is set to 0, processing continues with the next rule, else packet is
-allowed to pass and search terminates.
-If the packet is a fragment in the middle, it is consumed and
+is set to 0, processing continues with the next rule.
+Otherwise, the packet is allowed to pass and the search terminates.
+If the packet is a fragment in the middle of a logical group of fragments,
+it is consumed and
processing stops immediately.
.Pp
-Fragments handling can be tuned via
+Fragment handling can be tuned via
.Va net.inet.ip.maxfragpackets
and
.Va net.inet.ip.maxfragsperpacket
More information about the svn-src-all
mailing list