Attachment 16159 Details for Bug 29744 – file.diff

[patch] file.diff

file.diff (text/plain), 2.96 KB, created by ncalvo on 2001-08-16 05:40:00 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: ncalvo

Created: 2001-08-16 05:40:00 UTC

Size: 2.96 KB

patch

obsolete

>--- article.sgml.orig   Thu Aug 16 06:02:35 2001
>+++ article.sgml        Thu Aug 16 06:19:57 2001
>@@ -28,7 +28,7 @@
> 
>     <abstract>
>       <para>This article documents how to setup a firewall using a PPP
>-       dialup with FreeBSD and IPFW, and specifically with firewalling over
>+       dialup with FreeBSD and &man.ipfw.8;, and specifically with firewalling over
>        a dialup with a dynamically assigned IP address.  This document does
>        not cover setting up your PPP connection in the first place.</para>
>     </abstract>
>@@ -175,7 +175,7 @@
>       order of allow first and  then deny. The premise is that you add the
>       rules for your allows, and  then everything else is denied. :)</para>
> 
>-    <para>Now, let's make the dir /etc/firewall. Change into the directory and
>+    <para>Now, let's make the dir <filename>/etc/firewall</filename>. Change into the directory and
>       edit the file <filename>fwrules</filename> as we specified in
>       <filename>rc.conf</filename>. Please note that you can change this
>       filename to be anything you wish. This guide just gives an example of a
>@@ -247,16 +247,16 @@
>     <qandaset>
>       <qandaentry>
>        <question>
>-         <para>Why are you using natd and ipfw when you could be using
>-           the built in ppp-filters?</para>
>+         <para>Why are you using &man.natd.8; and &man.ipfw.8; when you could be using
>+           the built in &man.ppp.8; filters?</para>
>        </question>
> 
>        <answer>
>          <para>I'll have to be honest and say there's no definitive reason
>-           why I use ipfw and natd instead of the built in ppp filters.  From
>+           why I use &man.ipfw.8; and &man.natd.8; instead of the built in &man.ppp.8; filters.  From
>            the discussions I've had with people the consensus seems to be
>-           that while ipfw is certainly more powerful and more configurable
>-           than the ppp filters, what it makes up for in functionality it
>+           that while &man.ipfw.8; is certainly more powerful and more configurable
>+           than the &man.ppp.8; filters, what it makes up for in functionality it
>            loses in being easy to customise.  One of the reasons I use it is
>            because I prefer firewalling to be done at a kernel level rather
>            than by a userland program.</para>
>@@ -289,9 +289,9 @@
>        </question>
> 
>        <answer>
>-         <para>The simple answer is no. The reason for this is that natd is
>+         <para>The simple answer is no. The reason for this is that &man.natd.8; is
>            doing address translation for <emphasis>anything</emphasis> being
>-           diverted through the tun0 device. As far as it's concerned
>+           diverted through the <devicename>tun0</devicename> device. As far as it's concerned
>            incoming packets will speak only to the dynamically assigned IP
>            address and NOT to the internal network. Note though that you can
>            add a rule like <literal>$fwcmd add deny all from

Actions: View | Diff

Attachments on bug 29744: 16159