From owner-freebsd-current@FreeBSD.ORG Mon Jun 23 00:07:07 2003 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 202BC37B401; Mon, 23 Jun 2003 00:07:07 -0700 (PDT) Received: from shop.digma.com.ua (shop.digma.com.ua [217.12.194.3]) by mx1.FreeBSD.org (Postfix) with ESMTP id B62E143FCB; Mon, 23 Jun 2003 00:07:01 -0700 (PDT) (envelope-from cub@cub.org.ua) Received: from cub.org.ua (demani.digma [172.22.5.7]) by shop.digma.com.ua (8.12.6p2/8.12.6) with ESMTP id h5N76vrH098037; Mon, 23 Jun 2003 10:06:57 +0300 (EEST) (envelope-from cub@cub.org.ua) Received: from demani.digma (localhost [127.0.0.1]) by cub.org.ua (8.12.9/8.12.9) with ESMTP id h5N76Qwx048329; Mon, 23 Jun 2003 10:06:26 +0300 (EEST) (envelope-from cub@demani.digma) Received: (from cub@localhost) by demani.digma (8.12.9/8.12.9/Submit) id h5N76Pnq048328; Mon, 23 Jun 2003 10:06:25 +0300 (EEST) (envelope-from cub) Date: Mon, 23 Jun 2003 10:06:25 +0300 (EEST) Message-Id: <200306230706.h5N76Pnq048328@demani.digma> To: FreeBSD-gnats-submit@freebsd.org From: Kostyuk Oleg X-send-pr-version: 3.113 X-GNATS-Notify: cc: freebsd-current@freebsd.org Subject: Error in ipfw manpage (EXAMPLES/SETS OF RULES) X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: Kostyuk Oleg List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Jun 2003 07:07:07 -0000 >Submitter-Id: current-users >Originator: Kostyuk Oleg >Organization: >Confidential: no >Synopsis: Error in ipfw manpage (EXAMPLES/SETS OF RULES) >Severity: non-critical >Priority: low >Category: docs >Class: doc-bug >Release: FreeBSD 5.1-RELEASE i386 >Environment: System: FreeBSD demani.digma 5.1-RELEASE FreeBSD 5.1-RELEASE #3: Mon Jun 9 12:19:59 EEST 2003 root@demani.digma:/usr/src/sys/i386/compile/CUB i386 >Description: The ipfw(8) manpage has an example of using ipfw sets of rules, but the example does not work. >How-To-Repeat: Try to execute commands from EXAMPLES/SETS OF RULES manpage section # id uid=0(root) gid=0(wheel) groups=0(wheel), 5(operator) # ipfw disable set 18 ipfw: unrecognize enable/disable keyword: set >Fix: Patch for manpage --- /usr/src/sbin/ipfw/ipfw.8 Sat Mar 15 03:13:00 2003 +++ ipfw.8 Mon Jun 23 09:50:59 2003 @@ -2001,9 +2001,9 @@ .Ss SETS OF RULES To add a set of rules atomically, e.g. set 18: .Pp -.Dl "ipfw disable set 18" +.Dl "ipfw set disable 18" .Dl "ipfw add NN set 18 ... # repeat as needed" -.Dl "ipfw enable set 18" +.Dl "ipfw set enable 18" .Pp To delete a set of rules atomically the command is simply: .Pp @@ -2011,9 +2011,9 @@ .Pp To test a ruleset and disable it and regain control if something goes wrong: .Pp -.Dl "ipfw disable set 18" +.Dl "ipfw set disable 18" .Dl "ipfw add NN set 18 ... # repeat as needed" -.Dl "ipfw enable set 18 ; echo done; sleep 30 && ipfw disable set 18" +.Dl "ipfw set enable 18 ; echo done; sleep 30 && ipfw set disable 18" .Pp Here if everything goes well, you press control-C before the "sleep" terminates, and your ruleset will be left active. Otherwise, e.g. if