Bug 144543

Summary:	[handbook] IPFW doc change
Product:	Documentation	Reporter:	Joe <fbsd1>
Component:	Books & Articles	Assignee:	Isabell Long <issyl0>
Status:	Closed FIXED
Severity:	Affects Only Me
Priority:	Normal
Version:	Latest
Hardware:	Any
OS:	Any

Description Joe 2010-03-08 02:00:03 UTC

IPFW has changed since the time when the IPFW section was written and it's nolonger required to compile IPFW into the FreeBSD kernel to get NAT functionality. Changes need to be done in 2 different places.

The following is in the handbook now

30.6.1 Enabling IPFW
IPFW is included in the basic FreeBSD install as a separate run time loadable module. The system will dynamically load the kernel module when the rc.conf statement firewall_enable="YES" is used. There is no need to compile IPFW into the FreeBSD kernel unless NAT functionality is desired.


Change the last sentance to read.

There is no need to compile IPFW into the FreeBSD kernel.


The following is in the handbook now

30.6.2 Kernel Options
It is not a mandatory requirement to enable IPFW by compiling the following options into the FreeBSD kernel, unless NAT functionality is required. It is presented here as background information.

Change to this

30.6.2 Kernel Options
It is not a mandatory requirement to enable IPFW by compiling the following options into the FreeBSD kernel. It is presented here as background information only.

Comment 1 chinsan freebsd_committer

2011-03-21 17:51:26 UTC

Responsible Changed
From-To: freebsd-doc->chinsan

I'll take this

Comment 2 Isabell Long freebsd_committer

2012-07-26 23:15:22 UTC

Responsible Changed
From-To: chinsan->issyl0

Take this, as discussed with gjb.

Comment 3 dfilter service freebsd_committer

2012-07-27 00:12:38 UTC

Author: issyl0
Date: Thu Jul 26 23:12:22 2012
New Revision: 39270
URL: http://svn.freebsd.org/changeset/doc/39270

Log:
  There is no need to compile IPFW into the FreeBSD kernel to make use of NAT
  functionality anymore, so remove these sentences.
  
  PR:		docs/144543
  Approved by:	gjb (mentor)

Modified:
  head/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml

Modified: head/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml
==============================================================================
--- head/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml	Thu Jul 26 14:27:36 2012	(r39269)
+++ head/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml	Thu Jul 26 23:12:22 2012	(r39270)
@@ -2131,8 +2131,7 @@ pass in quick on rl0 proto tcp from any 
 	run time loadable module.  The system will dynamically load the
 	kernel module when the <filename>rc.conf</filename> statement
 	<literal>firewall_enable="YES"</literal> is used.  There is no
-	need to compile IPFW into the &os; kernel unless
-	<acronym>NAT</acronym> functionality is desired.</para>
+	need to compile IPFW into the &os; kernel.</para>
 
       <para>After rebooting your system with
 	<literal>firewall_enable="YES"</literal> in
@@ -2180,9 +2179,8 @@ net.inet.ip.fw.verbose_limit=5</programl
       </indexterm>
 
       <para>It is not a mandatory requirement to enable IPFW by
-	compiling the following options into the &os; kernel, unless
-	<acronym>NAT</acronym> functionality is required.  It is presented here
-	as background information.</para>
+	compiling the following options into the &os; kernel.  It is
+	presented here as background information only.</para>
 
       <programlisting>options    IPFIREWALL</programlisting>
 
_______________________________________________
svn-doc-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/svn-doc-all
To unsubscribe, send any mail to "svn-doc-all-unsubscribe@freebsd.org"

Comment 4 Isabell Long freebsd_committer

2012-07-27 00:15:51 UTC

State Changed
From-To: open->closed

This has now been committed.  Thanks for reporting the problem, and 
sorry for the delay!