aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndrew Thompson <thompsa@FreeBSD.org>2006-10-24 08:47:39 +0000
committerAndrew Thompson <thompsa@FreeBSD.org>2006-10-24 08:47:39 +0000
commit2f764f809fabf65bf551a6ab8412f74c7bcb3f32 (patch)
tree6150361effb75efa1a8e6d56eb2b196ac8079ca8
parent4eaefb8160f06ddea7d3ad7120ee9c4ca1e5af99 (diff)
downloadsrc-2f764f809fabf65bf551a6ab8412f74c7bcb3f32.tar.gz
src-2f764f809fabf65bf551a6ab8412f74c7bcb3f32.zip
Document net.link.bridge.ipfw_arp for filtering ARP packets with ipfw.
MFC after: 3 days
Notes
Notes: svn path=/head/; revision=163643
-rw-r--r--share/man/man4/if_bridge.411
1 files changed, 11 insertions, 0 deletions
diff --git a/share/man/man4/if_bridge.4 b/share/man/man4/if_bridge.4
index 8eec71ff6fae..23090f94bc74 100644
--- a/share/man/man4/if_bridge.4
+++ b/share/man/man4/if_bridge.4
@@ -182,6 +182,17 @@ and
.Va pfil_member
will be disabled so that IPFW
is not run twice; these can be re-enabled if desired.
+.It Va net.link.bridge.ipfw_arp
+Set to
+.Li 1
+to enable layer2 ARP filtering with
+.Xr ipfirewall 4 ,
+set to
+.Li 0
+to disable it.
+Requires
+.Va ipfw
+to be enabled.
.El
.Pp
ARP and REVARP packets are forwarded without being filtered and others