From owner-svn-doc-all@FreeBSD.ORG  Sat Jun 29 13:19:43 2013
Return-Path: <owner-svn-doc-all@FreeBSD.ORG>
Delivered-To: svn-doc-all@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 by hub.freebsd.org (Postfix) with ESMTP id D302725D;
 Sat, 29 Jun 2013 13:19:43 +0000 (UTC)
 (envelope-from wblock@FreeBSD.org)
Received: from svn.freebsd.org (svn.freebsd.org
 [IPv6:2001:1900:2254:2068::e6a:0])
 by mx1.freebsd.org (Postfix) with ESMTP id C305B1673;
 Sat, 29 Jun 2013 13:19:43 +0000 (UTC)
Received: from svn.freebsd.org ([127.0.1.70])
 by svn.freebsd.org (8.14.7/8.14.7) with ESMTP id r5TDJhsE078031;
 Sat, 29 Jun 2013 13:19:43 GMT (envelope-from wblock@svn.freebsd.org)
Received: (from wblock@localhost)
 by svn.freebsd.org (8.14.7/8.14.5/Submit) id r5TDJhVm078030;
 Sat, 29 Jun 2013 13:19:43 GMT (envelope-from wblock@svn.freebsd.org)
Message-Id: <201306291319.r5TDJhVm078030@svn.freebsd.org>
From: Warren Block <wblock@FreeBSD.org>
Date: Sat, 29 Jun 2013 13:19:43 +0000 (UTC)
To: doc-committers@freebsd.org, svn-doc-all@freebsd.org,
 svn-doc-head@freebsd.org
Subject: svn commit: r42084 - head/en_US.ISO8859-1/books/handbook/firewalls
X-SVN-Group: doc-head
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-BeenThere: svn-doc-all@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: "SVN commit messages for the entire doc trees \(except for &quot;
 user&quot; , &quot; projects&quot; , and &quot; translations&quot;
 \)" <svn-doc-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/svn-doc-all>,
 <mailto:svn-doc-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/svn-doc-all>
List-Post: <mailto:svn-doc-all@freebsd.org>
List-Help: <mailto:svn-doc-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/svn-doc-all>,
 <mailto:svn-doc-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 29 Jun 2013 13:19:43 -0000

Author: wblock
Date: Sat Jun 29 13:19:43 2013
New Revision: 42084
URL: http://svnweb.freebsd.org/changeset/doc/42084

Log:
  Correct the example that allows internal but blocks external ICMP.
  
  Reviewed by:	Peter N. M. Hansteen <peter@bsdly.net>

Modified:
  head/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml

Modified: head/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml
==============================================================================
--- head/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml	Sat Jun 29 12:11:17 2013	(r42083)
+++ head/en_US.ISO8859-1/books/handbook/firewalls/chapter.xml	Sat Jun 29 13:19:43 2013	(r42084)
@@ -1086,8 +1086,8 @@ rdr-anchor "ftp-proxy/*"</programlisting
 	    <acronym>ICMP</acronym> traffic from the local net through
 	    and stop probes from elsewhere at the gateway:</para>
 
-	  <programlisting>pass inet proto icmp icmp-type $icmp_types from $localnet to any keep state
-pass inet proto icmp icmp-type $icmp_types from any to $ext_if keep state</programlisting>
+	  <programlisting>pass inet proto icmp from $localnet to any keep state
+pass inet proto icmp from any to $ext_if keep state</programlisting>
 
 	  <para>Stopping probes at the gateway might be an attractive
 	    option anyway, but let us have a look at a few other