Print this page
12745 man page typos

*** 1,23 **** '\" te .\" To view license terms, attribution, and copyright for IP Filter, the default path is /usr/lib/ipf/IPFILTER.LICENCE. If the Solaris operating environment has been installed anywhere other than the default, modify the given path to access the file at the installed .\" location. .\" Portions Copyright (c) 2009, Sun Microsystems Inc. All Rights Reserved. .\" Portions Copyright (c) 2015, Joyent, Inc. ! .TH IPF 1M "April 9, 2016" .SH NAME ipf \- alter packet filtering lists for IP packet input and output .SH SYNOPSIS - .LP .nf \fBipf\fR [\fB-6AdDEGInoPRrsvVyzZ\fR] [\fB-l\fR block | pass | nomatch] [\fB-T\fR \fIoptionlist\fR] [\fB-F\fR i | o | a | s | S] \fB-f\fR \fIfilename\fR [\fB-f\fR \fIfilename\fR...] [\fIzonename\fR] .fi .SH DESCRIPTION - .LP The \fBipf\fR utility is part of a suite of commands associated with the Solaris IP Filter feature. See \fBipfilter\fR(5). .sp .LP The \fBipf\fR utility opens the filenames listed (treating a hyphen (\fB-\fR) --- 1,21 ---- '\" te .\" To view license terms, attribution, and copyright for IP Filter, the default path is /usr/lib/ipf/IPFILTER.LICENCE. If the Solaris operating environment has been installed anywhere other than the default, modify the given path to access the file at the installed .\" location. .\" Portions Copyright (c) 2009, Sun Microsystems Inc. All Rights Reserved. .\" Portions Copyright (c) 2015, Joyent, Inc. ! .TH IPF 1M "May 17, 2020" .SH NAME ipf \- alter packet filtering lists for IP packet input and output .SH SYNOPSIS .nf \fBipf\fR [\fB-6AdDEGInoPRrsvVyzZ\fR] [\fB-l\fR block | pass | nomatch] [\fB-T\fR \fIoptionlist\fR] [\fB-F\fR i | o | a | s | S] \fB-f\fR \fIfilename\fR [\fB-f\fR \fIfilename\fR...] [\fIzonename\fR] .fi .SH DESCRIPTION The \fBipf\fR utility is part of a suite of commands associated with the Solaris IP Filter feature. See \fBipfilter\fR(5). .sp .LP The \fBipf\fR utility opens the filenames listed (treating a hyphen (\fB-\fR)
*** 32,42 **** .LP \fBipf\fR's use is restricted through access to \fB/dev/ipauth\fR, \fB/dev/ipl\fR, and \fB/dev/ipstate\fR. The default permissions of these files require \fBipf\fR to be run as root for all operations. .SS "Enabling Solaris IP Filter Feature" - .LP Solaris IP Filter is installed with the Solaris operating system. However, packet filtering is not enabled by default. Use the following procedure to activate the Solaris IP Filter feature. .RS +4 .TP --- 30,39 ----
*** 59,69 **** .RS +4 .TP 4. (Optional) Create an address pool configuration file. See \fBippool\fR(4). .sp ! Create an \fBipool.conf\fR file if you want to refer to a group of addresses as a single address pool. If you want the address pool configuration file to be loaded at boot time, create a file called \fB/etc/ipf/ippool.conf\fR in which to put the address pool. If you do not want the address pool configuration file to be loaded at boot time, put the \fBippool.conf\fR file in a location other than \fB/etc/ipf\fR and manually activate the rules. --- 56,66 ---- .RS +4 .TP 4. (Optional) Create an address pool configuration file. See \fBippool\fR(4). .sp ! Create an \fBippool.conf\fR file if you want to refer to a group of addresses as a single address pool. If you want the address pool configuration file to be loaded at boot time, create a file called \fB/etc/ipf/ippool.conf\fR in which to put the address pool. If you do not want the address pool configuration file to be loaded at boot time, put the \fBippool.conf\fR file in a location other than \fB/etc/ipf\fR and manually activate the rules.
*** 156,166 **** .RS 2 If you reboot your system, the IPfilter configuration is automatically activated. .RE .SH OPTIONS - .LP The following options are supported: .sp .ne 2 .na \fB\fB-6\fR\fR --- 153,162 ----
*** 467,477 **** Zero global statistics held in the kernel for filtering only. This does not affect fragment or state statistics. .RE .SH ZONES - .LP Each non-global zone has two ipfilter instances: the in-zone ipfilter, which can be controlled from both the zone itself and the global zone, and the Global Zone-controlled (GZ-controlled) instance, which can only be controlled from the Global Zone. The non-global zone is not able to observe or control the GZ-controlled ipfilter. --- 463,472 ----
*** 523,533 **** .RS 4n Contains numerous IP Filter examples. .RE .SH ATTRIBUTES - .LP See \fBattributes\fR(5) for descriptions of the following attributes: .sp .sp .TS --- 518,527 ----
*** 538,553 **** _ Interface Stability Committed .TE .SH SEE ALSO - .LP \fBipfstat\fR(1M), \fBipmon\fR(1M), \fBipnat\fR(1M), \fBippool\fR(1M), \fBsvcadm\fR(1M), \fBsvc.ipfd\fR(1M), \fBipf\fR(4), \fBipnat\fR(4), \fBippool\fR(4), \fBattributes\fR(5), \fBipfilter\fR(5), \fBzones(5)\fR .sp .LP \fI\fR .SH DIAGNOSTICS - .LP Needs to be run as root for the packet filtering lists to actually be affected inside the kernel. --- 532,545 ----