From owner-freebsd-questions@FreeBSD.ORG Thu Jan 22 05:25:25 2015 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 1406A896 for ; Thu, 22 Jan 2015 05:25:25 +0000 (UTC) Received: from ipmail05.adl6.internode.on.net (ipmail05.adl6.internode.on.net [150.101.137.143]) by mx1.freebsd.org (Postfix) with ESMTP id 8D6C89A4 for ; Thu, 22 Jan 2015 05:25:23 +0000 (UTC) Received: from ppp14-2-13-162.lns21.adl2.internode.on.net (HELO leader.local) ([14.2.13.162]) by ipmail05.adl6.internode.on.net with ESMTP; 22 Jan 2015 15:50:03 +1030 Message-ID: <54C08881.2010200@ShaneWare.Biz> Date: Thu, 22 Jan 2015 15:50:01 +1030 From: Shane Ambler User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: galtsev@kicp.uchicago.edu, Odhiambo Washington Subject: Re: IPFilter & FreeBSD-10.1 References: <54BF7050.90605@ShaneWare.Biz> <51264.128.135.70.2.1421883154.squirrel@cosmo.uchicago.edu> In-Reply-To: <51264.128.135.70.2.1421883154.squirrel@cosmo.uchicago.edu> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Cc: User Questions X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Jan 2015 05:25:25 -0000 On 22/01/2015 10:02, Valeri Galtsev wrote: > > On Wed, January 21, 2015 3:29 am, Odhiambo Washington wrote: >> Hi Shane, >> >> Where is the new syntax documented? Or I just have to 'man ipf'? I'd love >> to see a web discussion about it, which I obviously missed. >> >> Is there a sort of rule converter? :-) >> >> Thank you for mentioning this syntax thing. Must be the one that was >> biting >> me on 10.1 I use ipfw myself, I read the email out of curiosity. Personally I would clear the rules and add one at a time till I get an error. Sounds like some people have no problem so there may only be one small change that breaks your rules. > > I wonder if anyone knows URl of official website of ipfilter. Both project > info on sourceforge (http://sourceforge.net/projects/ipfilter/) and > wikipedia page (https://en.wikipedia.org/wiki/IPFilter) point at the place > which apparently doesn't exist so you end up getting just front page of > the university: http://asiapacific.anu.edu.au/ ... The handbook page on ipfilter links to http://www.phildev.net/ipf/ which is only a faq page, so it looks like the man pages are the best docs. Sourceforge could still be the place of all development, the cvs repo has a few files that were changed 7 months ago. > One does want to read the documentation to be able to keep using ipfilter > on FreBSD 10.x (as one did on FreeBSD 9.x in the past). And with syntax > changed, one does have to read Documentation (and here brilliant FreeBSD > documentation seems to be outdated...) > > Thanks a lot for your answers! > > Valeri -- FreeBSD - the place to B...Software Developing Shane Ambler