Print this page
12743 man page spelling mistakes
| Split |
Close |
| Expand all |
| Collapse all |
--- old/usr/src/man/man4/ippool.4.man.txt
+++ new/usr/src/man/man4/ippool.4.man.txt
1 1 IPPOOL(4) File Formats and Configurations IPPOOL(4)
2 2
3 3
4 4
5 5 NAME
6 6 ippool, ippool.conf - IP Pool file format
7 7
8 8 DESCRIPTION
9 9 The format for files accepted by ippool is described by the following
10 10 grammar:
11 11
12 12 line ::= table | groupmap .
13 13 table ::= "table" role tabletype .
14 14 groupmap ::= "group-map" inout role number ipfgroup
15 15 tabletype ::= ipftree | ipfhash .
16 16
17 17 role ::= "role" "=" "ipf" .
18 18 inout ::= "in" | "out" .
19 19
20 20 ipftree ::= "type" "=" "tree" number "{" addrlist "}" .
21 21 ipfhash ::= "type" "=" "hash" number hashopts "{" hashlist "}" .
22 22
23 23 ipfgroup ::= setgroup hashopts "{" grouplist "}" |
24 24 hashopts "{" setgrouplist "}" .
25 25 setgroup ::= "group" "=" groupname .
26 26
27 27 hashopts ::= size [ seed ] | seed .
28 28
29 29 size ::= "size" number .
30 30 seed ::= "seed" number .
31 31
32 32 addrlist ::= [ "!" ] addrmask ";" [ addrlist ] .
33 33 grouplist ::= groupentry ";" [ grouplist ] | addrmask ";" [ grouplist ] .
34 34
35 35 setgrouplist ::= groupentry ";" [ setgrouplist ] .
36 36
37 37 groupentry ::= addrmask "," setgroup .
38 38
39 39 hashlist ::= hashentry ";" [ hashlist ] .
40 40 hashentry ::= addrmask .
41 41
42 42 addrmask ::= ipaddr | ipaddr "/" mask .
43 43
44 44 mask ::= number | ipaddr .
45 45
46 46 groupname ::= number | name .
47 47
48 48 number ::= digit { digit } .
49 49
50 50 ipaddr = host-num "." host-num "." host-num "." host-num .
51 51 host-num = digit [ digit [ digit ] ] .
52 52
53 53 digit ::= "0" | "1" | "2" | "3" | "4" | "5" | "6" | "7" | "8" | "9" .
54 54 name ::= letter { letter | digit } .
55 55
56 56 The IP pool configuration file is used for defining a single object
57 57 that contains a reference to multiple IP address/netmask pairs. A pool
58 58 may consist of a mixture of netmask sizes, from 0 to 32.
59 59
60 60 At this point in time, only IPv4 addressing is supported.
61 61
62 62 OVERVIEW
63 63 The IP pool configuration file provides for defining two different
64 64 mechanisms for improving speed in matching IP addresses with rules.
65 65 The first, table , defines a lookup table to provide a single reference
66 66 in a filter rule to multiple targets and the second, group-map ,
67 67 provides a mechanism to target multiple groups from a single filter
68 68 line.
69 69
70 70 The group-map command can only be used with filter rules that use the
71 71 call command to invoke either fr_srcgrpmap or fr_dstgrpmap , to use the
72 72 source or destination address, respectively, for determining which
73 73 filter group to jump to next for continuation of filter packet
74 74 processing.
75 75
|
↓ open down ↓ |
75 lines elided |
↑ open up ↑ |
76 76 POOL TYPES
77 77 Two storage formats are provided: hash tables and tree structure. The
78 78 hash table is intended for use with objects all containing the same
79 79 netmask or a few different sized netmasks of non-overlapping address
80 80 space and the tree is designed for being able to support exceptions to
81 81 a covering mask, in addition to normal searching as you would do with a
82 82 table. It is not possible to use the tree data storage type with
83 83 group-map configuration entries.
84 84
85 85 POOL ROLES
86 - When a pool is defined in the configruation file, it must have an
86 + When a pool is defined in the configuration file, it must have an
87 87 associated role. At present the only supported role is ipf. Future
88 88 development will see further expansion of their use by other sections
89 89 of IPFilter code.
90 90
91 91 EXAMPLES
92 92 The following examples show how the pool configuration file is used
93 93 with the ipf configuration file to enhance the ability for the ipf
94 94 configuration file to be succinct in meaning.
95 95
96 96 1 The first example shows how a filter rule makes reference to a
97 97 specific pool for matching of the source address.
98 98 pass in from pool/100 to any
99 99
100 100 The pool configuration, which matches IP addresses 1.1.1.1 and any in
101 101 2.2.0.0/16, except for those in 2.2.2.0/24.
102 102
103 103 table role = ipf type = tree number = 100
104 104 { 1.1.1.1/32; 2.2.0.0/16; !2.2.2.0/24 };
105 105
106 106 2 The following ipf.conf extract uses the
107 107 fr_srcgrpmap/fr_dstgrpmap lookups to use the group-map facility
108 108 to lookup the next group to use for filter processing, providing
109 109 the call filter rule is matched.
110 110 call now fr_srcgrpmap/1010 in all
111 111 call now fr_dstgrpmap/2010 out all
112 112 pass in all group 1020
113 113 block in all group 1030
114 114 pass out all group 2020
115 115 block out all group 2040
116 116
117 117 A ippool configuration to work with the above ipf.conf file might look
118 118 like this:
119 119
120 120 group-map in role = ipf number = 1010
121 121 { 1.1.1.1/32, group = 1020; 3.3.0.0/16, group = 1030; };
122 122 group-map out role = ipf number = 2010 group = 2020
123 123 { 2.2.2.2/32; 4.4.0.0/16; 5.0.0.0/8, group = 2040; };
124 124
|
↓ open down ↓ |
28 lines elided |
↑ open up ↑ |
125 125 FILES
126 126 /dev/iplookup
127 127 /etc/ippool.conf
128 128 /etc/hosts
129 129
130 130 SEE ALSO
131 131 ippool(1M), hosts(4), ipf(4), ipf(1M), ipnat(1M), ipfilter(5)
132 132
133 133
134 134
135 - April 9, 2016 IPPOOL(4)
135 + May 16, 2020 IPPOOL(4)
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX