From owner-man-jp-reviewer@jp.freebsd.org  Sun Nov  5 18:35:00 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id SAA03734;
	Sun, 5 Nov 2000 18:35:00 +0900 (JST)
	(envelope-from owner-man-jp-reviewer@jp.FreeBSD.org)
Received: from smtp1.interramp.com (smtp1.interramp.com [38.8.45.2])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id SAA03719
	for <man-jp-reviewer@jp.freebsd.org>; Sun, 5 Nov 2000 18:34:59 +0900 (JST)
	(envelope-from horikawa@psinet.com)
Received: from [38.26.194.29] (helo=localhost)
	by smtp1.interramp.com with esmtp (Exim 1.90 #1)
	for man-jp-reviewer@jp.freebsd.org
	id 13sMCV-0006PD-00; Sun, 5 Nov 2000 04:34:55 -0500
To: man-jp-reviewer@jp.freebsd.org
X-Mailer: Mew version 1.94.1 on Emacs 19.34 / Mule 2.3 (SUETSUMUHANA)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Message-Id: <20001105043428Q.horikawa@psinet.com>
Date: Sun, 05 Nov 2000 04:34:28 -0500
From: Kazuo Horikawa <horikawa@psinet.com>
X-Dispatcher: imput version 20000228(IM140)
Lines: 271
Reply-To: man-jp-reviewer@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: man-jp-reviewer 3052
Subject: [man-jp-reviewer 3052] (check) ip6fw.8
Errors-To: owner-man-jp-reviewer@jp.freebsd.org
Sender: owner-man-jp-reviewer@jp.freebsd.org
X-Originator: horikawa@psinet.com

 $BKY@n$G$9!#(B
 ip6fw.8 $B$N%A%'%C%/$G$9!#(B

 o 48 $B9TL\IU6a(B
   SYNOPSIS $B$O!VNc!W$G$O$J$$$G$9!#(B
   $B!V!A$K$"$kNc!W$H$$$&5-=R$r:o=|$7$^$7$?!#(B
 o 95 $B9TL\IU6a(B
   $B!V(B65535 deny all from any to any$B!W$O%k!<%k$J$N$G!"Lu$5$:$=$N$^$^$K(B
   $B$7$^$7$?!#(B
 o 250 $B9TL\IU6a(B
   "not" $B$H$$$&(B modifier $B$G$9!#(B
   $B86J8$O(B The sense of the match can be inverted by preceding an
   address with the ``not'' modifier, causing all other addresses to
   be matched instead.
 o 266 $B9TL\IU6a(B
   $B!V:GBg$,(B IP6_FW_MAX_PORTS $B8D$N(B port$B!W$H$J$k$h$&$K$7$^$7$?!#(B
   $B86J8$O(B A range may only be specified as the first value, and the
   length of the port list is limited to IP6_FW_MAX_PORTS (as defined
   in /usr/src/sys/netinet/ip6_fw.h) ports.
 o 304 $B9TL\IU6a(B
   $B!V$$$/$D$+!W(B->$B!V$J$s$i$+$N!W(B
   $B!V(Bsome interface$B!W$G$"$j!"!V(Bsome interfaces$B!W$G$O$J$$$G$9!#(B
 o 349 $B9TL\IU6a(B
   $B!V(Blocalhost$B!W$@$H%k!<%W%P%C%/%$%s%?%U%'!<%9$N@h$K$"$k%[%9%H$+$H(B
   $B$A$g$C$H;W$C$?$N$G$9$,!"$3$3$G$O$=$&$G$O$J$$$G$9!#!V%m!<%+%k%[%9%H!W(B
   $B$H$7$^$7$?!#(B
 o 444 $B9TL\IU6a(B
   $B%U%!%$%"%&%)!<%k$r$$$D$G$bL5;k$9$k%Q%1%C%H$,(B 1 $B<oN`$"$j$^$9!#(B
   ->
   $B%U%!%$%"%&%)!<%k$,>o$KGK4~$9$k%Q%1%C%H$,(B 1 $B<oN`$"$j$^$9!#(B
   $B86J8$O(B There is one kind of packet that the firewall will always
   discard, ...
 o 520 $B9TL\IU6a(B
   API $B$O!"(BBSDI $BMQ$K(B Daniel Boulet $B$,=q$$$?%3!<%I$K4p$$$F$$$^$9!#(B
   $B86J8$O!"(BAPI based upon code written by Daniel Boulet for BSDI.

--- ip6fw.8.bak	Sun Nov  5 02:58:29 2000
+++ ip6fw.8	Sun Nov  5 04:17:08 2000
@@ -1,13 +1,13 @@
 .\"
 .\" $FreeBSD: src/sbin/ip6fw/ip6fw.8,v 1.3.2.1 2000/05/04 17:35:17 phantom Exp $
 .\"
-.Dd March 13, 2000
 .\" jpman %Id: ip6fw.8,v 1.2 2000/10/31 15:26:34 yt-kage Stab %
 .\" WORD:  modifier           $B=$>~;R(B
 .\" WORD:  fragmented packet  $B%U%i%0%a%s%H%Q%1%C%H(B
 .\" WORD:  encapsulating security payload $B0E9f%Z%$%m!<%I(B [IPv6]
 .\" WORD:  no next header     $B<!%X%C%@$J$7(B [IPv6]
 .\" WORD:  fine points        $BHyD4@0(B
+.Dd March 13, 2000
 .Dt IP6FW 8
 .Os FreeBSD
 .Sh $BL>>N(B
@@ -48,7 +48,7 @@
 .Op via Ar name | ipv6no
 .Op Ar options
 .Sh $B2r@b(B
-$B=q<0$N9`$K$"$kNc$NBh(B 1 $B9TL\$N$h$&$K;HMQ$9$k$H!"(B
+$B=q<0$NBh(B 1 $B9TL\$N$h$&$K;HMQ$9$k$H!"(B
 .Ar file
 $B$,(B 1 $B9T$:$DFI$_9~$^$l!"(B
 .Nm
@@ -69,7 +69,7 @@
 $B%k!<%k$r7h$a$?$j:o=|$7$?$j$9$k$N$K;HMQ$5$l$^$9!#(B
 $B%k!<%k$O>:=g$G;n$5$l!"%Q%1%C%H$K:G=i$K%^%C%A$7$?%k!<%k$,(B
 $BE,MQ$5$l$^$9!#(B
-$BJ#?t$N%k!<%k$,F1$89THV9f$r6&M-$9$k$3$H$,$G$-$^$9!#(B
+$BJ#?t$N%k!<%k$,F1$89THV9f$r6&M-$G$-$^$9!#(B
 $B$3$N>l9g!"DI2C$7$?=gHV$G%k!<%k$,E,MQ$5$l$^$9!#(B
 .Pp
 $BHV9f$r$D$1$:$K%k!<%k$rB-$7$?>l9g!"$=$ND>A0$N%k!<%k$h$j$b(B
@@ -77,7 +77,7 @@
 $BDj5A$5$l$?%k!<%kHV9f$N:GBgCM$,(B 65434 $B$h$j$bBg$-$$>l9g!"(B
 $B?7$7$/Dj5A$5$l$k%k!<%k$O!"%k!<%k$N:G8e$KDI2C$5$l$^$9!#(B
 .Pp
-$B:o=|A`:n$G$O!"$=$l$,B8:_$9$k>l9g$K$O!"(B
+delete $BA`:n$G$O!"$=$l$,B8:_$9$k>l9g$K$O!"(B
 .Ar number
 $B$r9THV9f$K$b$D:G=i$N%k!<%k$,:o=|$5$l$^$9!#(B
 .Pp
@@ -95,9 +95,9 @@
 $B$G;O$^$k%3%^%s%I$*$h$S6uGr$@$1$N%3%^%s%I$O$_$J(B
 $BL5;k$5$l$^$9!#(B
 .Pp
-$B%k!<%k$OI,$:(B 1 $B$D$"$j$^$9(B:
+$B<!$N%k!<%k$OI,$:B8:_$7$^$9(B:
 .Bd -literal -offset center
-65535 $B$O!"$I$N%[%9%H$+$i$I$N%[%9%H$X$$$/%k!<%H$b5qH]$7$^$9!#(B
+65535 deny all from any to any
 .Ed
 .Pp
 $B$3$N%k!<%k$O%G%U%)%k%H$N%]%j%7$G$9!#$9$J$o$A!"(B
@@ -105,7 +105,7 @@
 $B$"$J$?$,$9$Y$-;E;v$O!"$3$N%]%j%7$rI,MW$K9g$o$;$F(B
 $BJQ99$9$k$H$$$&$3$H$G$9!#(B
 .Pp
-$B<!$N$h$&$J%*%W%7%g%s$,;HMQ$G$-$^$9(B:
+$B<!$N%*%W%7%g%s$,;HMQ$G$-$^$9(B:
 .Bl -tag -width flag
 .It Fl a
 $B%j%9%HCf$K!"%+%&%s%?CM$rI=<($7$^$9!#(B
@@ -119,14 +119,13 @@
 $B$3$N%*%W%7%g%s$,;XDj$5$l$F$$$^$9!#(B
 .It Fl q
 add $BA`:n$d(B zero $BA`:n!"(Bflush $BA`:n$r9T$C$F$$$k:GCf$K!"(B
-$B$=$N%"%/%7%g%s$KBP$7$F2?$bI=<($7$^$;$s(B ($B0EL[$N$&$A$K(B
-'-f' $B$,;XDj$5$l$F$$$^$9(B)$B!#(B
+$B$=$N%"%/%7%g%s$KBP$7$F2?$bI=<($7$^$;$s(B ($B0EL[$N$&$A$K(B '-f' $B$,;XDj$5$l$F$$$^$9(B)$B!#(B
 $B$3$l$O!"%j%b!<%H%m%0%$%s;~$N%;%C%7%g%s$G(B
 $B%9%/%j%W%HFb$GJ#?t$N(B ip6fw $B%3%^%s%I$r<B9T$7$?$j(B
 ($BNc$($P!"(Bsh /etc/rc.firewall $B$N$h$&$K(B)$B!"(B
 $B$?$/$5$s$N(B ip6fw $B%k!<%k%U%!%$%k$r=hM}$7$?$j$9$k$3$H$G(B
 $B%k!<%k$rD4@a$9$k$H$-$KJXMx$G$9!#(B
-$BDL>o%b!<%I(B (verbose) $B$G(B flush $BA`:n$r9T$&$H!"%a%C%;!<%8$,=PNO(B
+$BDL>o%b!<%I(B ($B>iD9(B) $B$G(B flush $BA`:n$r9T$&$H!"%a%C%;!<%8$,=PNO(B
 $B$5$l$^$9!#%k!<%k$,$9$Y$F(B flush $B$5$l$k$N$G!"%m%0%$%s%;%C%7%g%s$K(B
 $B%a%C%;!<%8$rAw$k$3$H$,$G$-$:!"%m%0%$%s%;%C%7%g%s$bJD$8$F$7$^$$$^$9!#(B
 $B$=$N$?$a!";D$j$N%k!<%k%;%C%H$O=hM}$5$l$J$/$J$C$F$7$^$$$^$9!#(B
@@ -137,7 +136,8 @@
 $B=PNO$G!"%"%I%l%9$*$h$S%5!<%S%9L>$r2r7h$7$h$&$H$7$^$9!#(B
 .El
 .Pp
-.Ar $B%"%/%7%g%s(B :
+.Ar $B%"%/%7%g%s(B
+$B$O<!$NDL$j$G$9!#(B
 .Bl -hang -offset flag -width 1234567890123456
 .It Ar allow
 $B%k!<%k$K%^%C%A$7$?%Q%1%C%H$r5v2D$7$^$9!#(B
@@ -161,9 +161,9 @@
 .It Ar unreach code
 $B%k!<%k$K%^%C%A$7$?%Q%1%C%H$r<N$F$F!"(B
 ICMPv6 $B$N(B
-unreachable notice with code
+unreachable notice $B%a%C%;!<%8$r%3!<%I(B
 .Ar code
-$B%a%C%;!<%8$rAw$m$&$H$7$^$9!#$3$3$G!"(B
+$B$GAw$m$&$H$7$^$9!#$3$3$G!"(B
 .Ar code
 $B$O(B 0 $B$+$i(B 255 $B$^$G$NHV9f$b$7$/$O<!$NJLL>$N$&$A$N$$$:$l$+$G$9(B:
 .Ar noroute ,
@@ -208,9 +208,10 @@
 .Pp
 $B%3%s%=!<%k$X$N%m%.%s%0$*$h$S%m%0$N@)8B$r(B
 .Xr sysctl 8
-$B%$%s%?%U%'!<%9$r2p$7$FF0E*$KD4@0$9$k$3$H$,$G$-$^$9!#(B
+$B%$%s%?%U%'!<%9$r2p$7$FF0E*$KD4@0$G$-$^$9!#(B
 .Pp
-.Ar proto :
+.Ar proto
+$B$O<!$NDL$j$G$9!#(B
 .Bl -hang -offset flag -width 1234567890123456
 .It Ar ipv6
 $B$9$Y$F$N%Q%1%C%H$,%^%C%A$7$^$9!#(B
@@ -232,7 +233,8 @@
 .Pp
 .Ar src
 $B$*$h$S(B
-.Ar dst :
+.Ar dst
+$B$O<!$NDL$j$G$9!#(B
 .Bl -hang -offset flag
 .It Ar <address/prefixlen>
 .Op Ar ports
@@ -250,9 +252,8 @@
 $B$N$h$&$J7A<0$N%W%l%U%#%C%/%9D9$r$b$C$?(B IPv6 $B%J%s%P!#(B
 .El
 .Pp
-$B=$>~;R$r(B
-.Dq $B;}$?$J$$(B
-$B%"%I%l%9$rA0$K$D$1$k$3$H$G%^%C%A$N0UL#$rH?E>$5$;$k$3$H$,$G$-$^$9!#(B
+.Dq not
+$B=$>~;R$r%"%I%l%9$NA0$K$D$1$k$3$H$G!"%^%C%A$N0UL#$rH?E>$5$;$k$3$H$,$G$-$^$9!#(B
 $B$3$l$K$h$C$F!"B>$N$9$Y$F$N%"%I%l%9$,Be$o$j$K%^%C%A$9$k$h$&$K$J$j$^$9!#(B
 $B$3$l$O!"%]!<%HHV9f$NA*Br$K$O1F6A$"$j$^$;$s!#(B
 .Pp
@@ -266,13 +267,13 @@
 .Pp
 (
 .Pa /etc/services
-$B$h$j(B) $B%5!<%S%9L>$r(B
-$B?tCM$K$h$k%]!<%HHV9f$NBe$o$j$K;HMQ$9$k$3$H$,$G$-$^$9!#(B
+$B$h$j(B) $B%5!<%S%9L>$r!"(B
+$B?tCM$K$h$k%]!<%HHV9f$NBe$o$j$K;HMQ$G$-$^$9!#(B
 $BHO0O$O:G=i$NCM$H$7$F$N$_;XDj$G$-!"%]!<%H%j%9%HD9$O(B
 .Dv IP6_FW_MAX_PORTS
 (
 .Pa /usr/src/sys/netinet/ip6_fw.h
-$B$G;XDj(B) $B$^$G$K@)8B$5$l$F$$$^$9!#(B
+$B$G;XDj(B) $B8D$N%]!<%H$^$G$K@)8B$5$l$F$$$^$9!#(B
 .Pp
 0 $B$G$O$J$$%*%U%;%C%H$r;}$D(B ($B$9$J$o$A!":G=i$N%U%i%0%a%s%H$G$O$J$$(B)
 $B%U%i%0%a%s%H%Q%1%C%H$O!"(B1 $B$D0J>e$N%]!<%H$,Ns5s$5$l$?%k!<%k$K$O(B
@@ -304,7 +305,7 @@
 $B$rDL$i$J$/$F$O$J$j$^$;$s!#$3$3$G!"(BX $B$OG$0U$N%f%K%C%HHV9f$G$9!#(B
 .It Ar via any
 $B%Q%1%C%H$O!"(B
-.Em $B$$$/$D$+(B
+.Em $B$J$s$i$+$N(B
 $B%$%s%?%U%'!<%9$rDL$i$J$/$F$O$J$j$^$;$s!#(B
 .It Ar via ipv6no
 $B%Q%1%C%H$O!"(BIPv6 $B%"%I%l%9(B
@@ -349,8 +350,8 @@
 $B$r;XDj$9$k$N$OIT@5$G$9!#(B
 .Pp
 $B%Q%1%C%H$K$O!"<u?.%$%s%?%U%'!<%9$"$k$$$OAw?.%$%s%?%U%'!<%9$,$J$$(B
-$B$+$b$7$l$^$;$s!#(Blocalhost $B$+$iAw?.$5$l$?%Q%1%C%H$K$O(B
-$B<u?.%$%s%?%U%'!<%9$,$"$j$^$;$s!#$=$7$F!"(Blocalhost $B$X8~$1$F(B
+$B$+$b$7$l$^$;$s!#%m!<%+%k%[%9%H$+$iAw?.$5$l$?%Q%1%C%H$K$O(B
+$B<u?.%$%s%?%U%'!<%9$,$"$j$^$;$s!#$=$7$F!"%m!<%+%k%[%9%H$X8~$1$F(B
 $BAw?.$5$l$?%Q%1%C%H$K$OAw?.%$%s%?%U%'!<%9$,$"$j$^$;$s!#(B
 .Pp
 $BDI2C$N(B
@@ -371,7 +372,7 @@
 .It ipv6options Ar spec
 IPv6 $B%X%C%@$K!"(B
 .Ar spec
-$B$G;XDj$5$l$?%+%s%^6h@Z$j$N%*%W%7%g%s%j%9%H$NMWAG$,4^$^$l$F(B
+$B$G;XDj$5$l$?%3%s%^6h@Z$j$N%*%W%7%g%s%j%9%H$NMWAG$,4^$^$l$F(B
 $B$$$l$P%^%C%A$7$^$9!#(B
 $B%5%]!<%H$7$F$$$k(B IPv6 $B%*%W%7%g%s$O<!$NDL$j$G$9!#(B
 .Ar hopopt
@@ -401,7 +402,7 @@
 .It tcpflags Ar spec
 TCP $B%X%C%@$K!"(B
 .Ar spec
-$B$G;XDj$5$l$?%+%s%^6h@Z$j$N%U%i%0%j%9%H$NMWAG$,4^$^$l$F$$$l$P(B
+$B$G;XDj$5$l$?%3%s%^6h@Z$j$N%U%i%0%j%9%H$NMWAG$,4^$^$l$F$$$l$P(B
 $B%^%C%A$7$^$9!#(B
 $B%5%]!<%H$7$F$$$k(B TCP $B%U%i%0$O0J2<$NDL$j$G$9!#(B
 .Ar fin ,
@@ -426,8 +427,8 @@
 ICMPv6 $B$N%?%$%W$,(B
 .Ar types
 $B%j%9%HCf$K$"$l$P%^%C%A$7$^$9!#(B
-$B%j%9%H$O!"$I$s$JHO0O$r9g$o$;$?$b$N$G$b;XDj$G$-!"$^$?!"(B
-$B8D!9$N%?%$%W$r%+%s%^$G6h@Z$C$?$b$N$G$b;XDj$9$k$3$H$,$G$-$^$9(B
+$B%j%9%H$K$O!"HO0O$H!"8D!9$N%?%$%W$r%3%s%^$G6h@Z$C$?$b$N$r!"(B
+$BG$0U$KAH$_9g$o$;$F;XDj$G$-$^$9(B
 .El
 .Sh $B%A%'%C%/%j%9%H(B
 $B$3$3$K$O!"$"$J$?$,%k!<%k$r%G%6%$%s$9$k:]$K9MN8$9$Y$-(B
@@ -444,7 +445,7 @@
 $B%k!<%W%P%C%/%$%s%?%U%'!<%9$rK:$l$J$$$G$/$@$5$$!#(B
 .El
 .Sh $BHyD4@0(B
-$B%U%!%$%"%&%)!<%k$r$$$D$G$bL5;k$9$k%Q%1%C%H$,(B 1 $B<oN`$"$j$^$9!#(B
+$B%U%!%$%"%&%)!<%k$,>o$KGK4~$9$k%Q%1%C%H$,(B 1 $B<oN`$"$j$^$9!#(B
 $B$=$l$O!"%U%i%0%a%s%H%*%U%;%C%H(B 1 $B$r;}$C$?(B IPv6 $B%U%i%0%a%s%H$G$9!#(B
 $B$3$l$O@5$7$$%Q%1%C%H$G$9$,!";HMQJ}K!$O(B 1 $B$D$@$1$G$9!#(B
 $B$=$l$O!"%U%!%$%"%&%)!<%k$NH4$1F;$rC5$=$&$H$9$k$3$H$G$9!#(B
@@ -452,7 +453,7 @@
 $B%M%C%H%o!<%/1[$7$K%m%0%$%s$7$F$$$k>l9g$O!"(B
 .Nm
 $B$N(B KLD $B%P!<%8%g%s$r%m!<%I$9$k$N$O!"$*$=$i$/(B
-$B$"$J$?$,;W$C$F$$$k$[$I$K$OD>@\E*$J$b$N$G$O$J$$$G$7$g$&(B
+$B$"$J$?$,;W$C$F$$$k$[$I$K$O4JC1$G$O$J$$$G$7$g$&(B
 .Em ($B%5%]!<%H$5$l$F$$$^$;$s(B)$B!#(B
 $B<!$N$h$&$J%3%^%s%I9T$r?d>)$7$^$9!#(B
 .Bd -literal -offset center
@@ -520,9 +521,9 @@
 .An Alex Nash ,
 .An Archie Cobbs
 $B$G$9!#(B
-$B%3!<%I$K4p$E$$$?(B API $B$O!"(BBSDI $BMQ$K(B
+API $B$O!"(BBSDI $B$N(B
 .An Daniel Boulet
-$B$,=q$-$^$7$?!#(B
+$B$,=q$$$?%3!<%I$K4p$$$F$$$^$9!#(B
 .Sh $BNr;K(B
 .Nm
 $B$O:G=i$K(B
