Lines Matching +full:mac +full:- +full:address

32 .Nd "IP Address access control policy"
35 IP address access control policy into your kernel:
36 .Bd -ragged -offset indent
37 .Cd "options MAC"
43 .Bd -ragged -offset indent
44 .Cd "options MAC"
68 .Va security.mac.ipacl.rules
74 MIBs are used to control enforcement and behavior of this MAC Policy.
75 .Bl -tag -width indent
76 .It Va security.mac.ipacl.ipv4
81 .It Va security.mac.ipacl.ipv6
86 .It Va security.mac.ipacl.rules
87 The IP address access control list is specified in the following format:
92 .Bl -tag -width "interface"
103 Address family of the IP_addr.
107 IP address (or subnet) to be allowed/denied.
111 -1 implies the policy is enforced for the individual IP address.
112 For a non-negative value, a range of IP addresses (present in subnet)
120 .Bl -tag -width "1."
122 Assign ipv4=1, ipv6=0 and rules="1,1,,AF_INET,169.254.123.123/-1"
124 It allow only 169.254.123.123 IPv4 address for all interfaces (wildcard) of jail 1.
127 Assign ipv4=1, ipv6=1 and rules="1,1,epair0b,AF_INET6,fe80::/32@1,0,epair0b,AF_INET6,fe80::abcd/-1"
134 …T6,fc00::/7@2,0,,AF_INET6,fc00::1111:2200/120@2,1,,AF_INET6,fc00::1111:2299/-1@1,1,,AF_INET,198.51…
142 Please refer to mac/ipacl tests-framework for wide variety of examples on using
145 In the case where multiple rules are applicable to an IP address or
148 address.
154 .Xr mac 4 ,
155 .Xr mac 9
161 .An -nosplit