From owner-cvs-all  Sun Aug 18 21:52:19 2002
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 8ABB737B400; Sun, 18 Aug 2002 21:52:16 -0700 (PDT)
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 52EF343E4A; Sun, 18 Aug 2002 21:52:16 -0700 (PDT)
	(envelope-from luigi@FreeBSD.org)
Received: from freefall.freebsd.org (luigi@localhost [127.0.0.1])
	by freefall.freebsd.org (8.12.4/8.12.4) with ESMTP id g7J4qGJU080265;
	Sun, 18 Aug 2002 21:52:16 -0700 (PDT)
	(envelope-from luigi@freefall.freebsd.org)
Received: (from luigi@localhost)
	by freefall.freebsd.org (8.12.4/8.12.4/Submit) id g7J4qGiG080264;
	Sun, 18 Aug 2002 21:52:16 -0700 (PDT)
Message-Id: <200208190452.g7J4qGiG080264@freefall.freebsd.org>
From: Luigi Rizzo <luigi@FreeBSD.org>
Date: Sun, 18 Aug 2002 21:52:16 -0700 (PDT)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sbin/ipfw ipfw.8 ipfw2.c
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

luigi       2002/08/18 21:52:16 PDT

  Modified files:
    sbin/ipfw            ipfw.8 ipfw2.c 
  Log:
  Major cleanup of the parser and printing routines in an attempt to
  render the syntax less ambiguous.
  
  Now rules can be in one of these two forms
  
          <action> <protocol> from <src> to <dst> [options]
          <action> MAC dst-mac src-mac mac-type [options]
  
  however you can now specify MAC and IP header fields as options e.g.
  
          ipfw add allow all from any to any mac-type arp
          ipfw add allow all from any to any { dst-ip me or src-ip me }
  
  which makes complex expressions a lot easier to write and parse.
  The "all from any to any" part is there just for backward compatibility.
  
  Manpage updated accordingly.
  
  Revision  Changes    Path
  1.108     +90 -75    src/sbin/ipfw/ipfw.8
  1.11      +285 -134  src/sbin/ipfw/ipfw2.c

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message