miscellanous patches for faq/pf
"Jeremy C. Reed" <[email protected]>
| Newsgroups | gmane.os.openbsd.www |
|---|---|
| Message-ID | <[email protected]> |
Please consider some of the following minor changes for faq/pf. I have several other changes too but need to submit them later. Changes include: - add reference to sysctl(8) - add comma - use "or" instead of / - spell out digits in text - For the scrub.html change below, see pf.conf.5 revision 1.302: "'random-id' no longer applies only to outgoing packets." - spell out left angle and right angle brackets Index: faq/pf/example1.html =================================================================== RCS file: /cvs/www/faq/pf/example1.html,v retrieving revision 1.21 diff -b -u -r1.21 example1.html --- faq/pf/example1.html 1 Nov 2005 11:35:18 -0000 1.21 +++ faq/pf/example1.html 4 Jan 2006 06:19:14 -0000 @@ -132,7 +132,9 @@ <h3>Preparation</h3> This document assumes that the OpenBSD host has been properly configured to act as a router, including verifying IP networking setup, Internet -connectivity, and setting <tt>net.inet.ip.forwarding</tt> to "<tt>1</tt>". +connectivity, and setting +<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=8&manpath=OpenBSD+3.8">sysctl(8)</a> +variable <tt>net.inet.ip.forwarding</tt> to "<tt>1</tt>". <a name="ruleset"></a> <h2>The Ruleset</h2> Index: faq/pf/filter.html =================================================================== RCS file: /cvs/www/faq/pf/filter.html,v retrieving revision 1.34 diff -b -u -r1.34 filter.html --- faq/pf/filter.html 28 Dec 2005 17:11:25 -0000 1.34 +++ faq/pf/filter.html 4 Jan 2006 06:19:18 -0000 @@ -697,7 +697,7 @@ <a name="synproxy"></a> <h2>TCP SYN Proxy</h2> <p> -Normally when a client initiates a TCP connection to a server PF will +Normally when a client initiates a TCP connection to a server, PF will pass the <a href="http://www.inetdaemon.com/tutorials/internet/tcp/connections.html" >handshake</a> packets between the two endpoints as they arrive. Index: faq/pf/logging.html =================================================================== RCS file: /cvs/www/faq/pf/logging.html,v retrieving revision 1.25 diff -b -u -r1.25 logging.html --- faq/pf/logging.html 28 Dec 2005 17:12:26 -0000 1.25 +++ faq/pf/logging.html 4 Jan 2006 06:19:19 -0000 @@ -96,7 +96,7 @@ <dt><tt>user</tt> <dd>Causes the UNIX user-id and group-id that owns the socket that the -packet is sourced from/destined to (whichever socket is local) to be +packet is sourced from or destined to (whichever socket is local) to be logged along with the standard log information. </dl> @@ -374,7 +374,7 @@ <p> PF will now log in ASCII to <tt>/var/log/pflog.txt</tt>. If so configured in <tt>/etc/syslog.conf</tt>, it will also log to a remote -server. The logging is not immediate but it can take up to about 5-6 +server. The logging is not immediate but it can take up to about five to six minutes (the cron job interval) before the logged packets appear in the file. Index: faq/pf/scrub.html =================================================================== RCS file: /cvs/www/faq/pf/scrub.html,v retrieving revision 1.12 diff -b -u -r1.12 scrub.html --- faq/pf/scrub.html 7 Feb 2005 05:56:39 -0000 1.12 +++ faq/pf/scrub.html 4 Jan 2006 06:19:19 -0000 @@ -110,8 +110,8 @@ <dt><tt>random-id</tt> <dd>Replaces the IP identification field of -outgoing packets with random values to compensate for operating systems -that use predictable values. This option only applies to outgoing +packets with random values to compensate for operating systems +that use predictable values. This option only applies to packets that are not fragmented after the optional packet reassembly. <dt><tt>min-ttl <i>num</i></tt> Index: faq/pf/tables.html =================================================================== RCS file: /cvs/www/faq/pf/tables.html,v retrieving revision 1.16 diff -b -u -r1.16 tables.html --- faq/pf/tables.html 1 Nov 2005 11:35:18 -0000 1.16 +++ faq/pf/tables.html 4 Jan 2006 06:19:19 -0000 @@ -127,7 +127,8 @@ 192.0.2.0/24 network except for 192.0.2.5. <p> -Note that table names are always enclosed in < >. +Note that table names are always enclosed within +left angle (<) and right angle bracket characters (>). <p> Tables can also be populated from text files containing a list of IP