path: root/handbook/firewalls.sgml
diff options
authorJordan K. Hubbard <jkh@FreeBSD.org>1996-06-19 20:28:30 +0000
committerJordan K. Hubbard <jkh@FreeBSD.org>1996-06-19 20:28:30 +0000
commit8f8eb63a5a541d9fe183835eeccd0f9246a8ce8f (patch)
treebabf3b45278ff730781c4c6d874636e1489ea67d /handbook/firewalls.sgml
parent31444442c3a0c70f1c4de4aa0e4f95e5a6b9c31a (diff)
Merge from HEAD. This is part of a multi-part commit since the SGML tools
need to be merged as well for this to work, but they're in a different part of the subtree. I have to merge this because a) our -stable docs are way out of date and b) I need the "doc" distribution to appear in -stable if I'm to use a single copy of sysinstall for both. Reviewers of this MOST welcome!
Notes: svn path=/branches/RELENG_2_1_0/; revision=372
Diffstat (limited to 'handbook/firewalls.sgml')
1 files changed, 4 insertions, 4 deletions
diff --git a/handbook/firewalls.sgml b/handbook/firewalls.sgml
index cc39cdebd3..2bbf124233 100644
--- a/handbook/firewalls.sgml
+++ b/handbook/firewalls.sgml
@@ -1,4 +1,4 @@
-<!-- $Id: firewalls.sgml,v 1996-01-31 14:32:19 mpp Exp $ -->
+<!-- $Id: firewalls.sgml,v 1996-06-19 20:27:44 jkh Exp $ -->
<!-- The FreeBSD Documentation Project -->
<sect><heading>Firewalls<label id="firewalls"></heading>
@@ -47,7 +47,7 @@ impossible to cover them in this document.
<sect2><heading>Packet filtering routers<label id="firewalls:packet_filters"></heading>
<p>A router is a machine which forwards packets between two or more
-networks. A packet filtering router has an extra piece of code in it's
+networks. A packet filtering router has an extra piece of code in its
kernel, which compares each packet to a list of rules before deciding
if it should be forwarded or not. Most modern IP routing software has
packet filtering code in it, which defaults to forwarding all
@@ -56,7 +56,7 @@ the filtering code, so that it can decide if the packet should be
allowed to pass or not.
<p>To decide if a packet should be passed on or not, the code looks
-through it's set of rules for a rule which matches the contents of
+through its set of rules for a rule which matches the contents of
this packets headers. Once a match is found, the rule action is
obeyed. The rule action could be to drop the packet, to forward the
packet, or even to send an ICMP message back to the originator. Only
@@ -146,7 +146,7 @@ will happen.
<p>The configuration of the <tt>IPFW</tt> software is done through the
<tt>ipfw(8)</tt> utility. The syntax for this command looks
quite complicated, but it is relatively simple once you understand
-it's structure.
+its structure.
<p>There are currently two different command line formats for the
utility, depending on what you are doing. The first form is used when