Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 23 Jun 2003 10:06:25 +0300 (EEST)
From:      Kostyuk Oleg <cub@cub.org.ua>
To:        FreeBSD-gnats-submit@freebsd.org
Cc:        freebsd-current@freebsd.org
Subject:   Error in ipfw manpage (EXAMPLES/SETS OF RULES)
Message-ID:  <200306230706.h5N76Pnq048328@demani.digma>

next in thread | raw e-mail | index | archive | help

>Submitter-Id:	current-users
>Originator:	Kostyuk Oleg <cub@cub.org.ua>
>Organization:	
>Confidential:	no 
>Synopsis:	Error in ipfw manpage (EXAMPLES/SETS OF RULES)
>Severity:	non-critical
>Priority:	low
>Category:	docs
>Class:		doc-bug
>Release:	FreeBSD 5.1-RELEASE i386
>Environment:
System: FreeBSD demani.digma 5.1-RELEASE FreeBSD 5.1-RELEASE #3: Mon Jun 9 12:19:59 EEST 2003 root@demani.digma:/usr/src/sys/i386/compile/CUB i386


>Description:
	The ipfw(8) manpage has an example of using ipfw sets of rules,
        but the example does not work.

>How-To-Repeat:
	Try to execute commands from EXAMPLES/SETS OF RULES manpage section

	# id
	uid=0(root) gid=0(wheel) groups=0(wheel), 5(operator)
        # ipfw disable set 18
        ipfw: unrecognize enable/disable keyword: set

>Fix:
	Patch for manpage
	
	--- /usr/src/sbin/ipfw/ipfw.8   Sat Mar 15 03:13:00 2003
	+++ ipfw.8      Mon Jun 23 09:50:59 2003
	@@ -2001,9 +2001,9 @@
	 .Ss SETS OF RULES
	 To add a set of rules atomically, e.g. set 18:
	 .Pp
	-.Dl "ipfw disable set 18"
	+.Dl "ipfw set disable 18"
	 .Dl "ipfw add NN set 18 ...         # repeat as needed"
	-.Dl "ipfw enable set 18"
	+.Dl "ipfw set enable 18"
	 .Pp
	 To delete a set of rules atomically the command is simply:
	 .Pp
	@@ -2011,9 +2011,9 @@
	 .Pp
	 To test a ruleset and disable it and regain control if something goes wrong:
	 .Pp
	-.Dl "ipfw disable set 18"
	+.Dl "ipfw set disable 18"
	 .Dl "ipfw add NN set 18 ...         # repeat as needed"
	-.Dl "ipfw enable set 18 ; echo done; sleep 30 && ipfw disable set 18"
	+.Dl "ipfw set enable 18 ; echo done; sleep 30 && ipfw set disable 18"
	 .Pp
	 Here if everything goes well, you press control-C before the "sleep"
	 terminates, and your ruleset will be left active. Otherwise, e.g. if



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200306230706.h5N76Pnq048328>