186d7f5d3SJohn Marino.\" 286d7f5d3SJohn Marino.\" $FreeBSD: src/share/man/man4/ipfirewall.4,v 1.19.2.7 2002/11/18 21:51:16 luigi Exp $ 386d7f5d3SJohn Marino.\" $DragonFly: src/share/man/man4/ipfirewall.4,v 1.5 2007/07/29 16:43:05 swildner Exp $ 486d7f5d3SJohn Marino.\" 586d7f5d3SJohn Marino.Dd June 22, 1997 686d7f5d3SJohn Marino.Dt IPFW 4 786d7f5d3SJohn Marino.Os 886d7f5d3SJohn Marino.Sh NAME 986d7f5d3SJohn Marino.Nm ipfw 1086d7f5d3SJohn Marino.Nd IP packet filter and traffic accounting 1186d7f5d3SJohn Marino.Sh DESCRIPTION 1286d7f5d3SJohn Marino.Nm Ipfw 1386d7f5d3SJohn Marinois a system facility which allows filtering, 1486d7f5d3SJohn Marinoredirecting, and other operations on IP packets travelling through 1586d7f5d3SJohn Marinosystem interfaces. 1686d7f5d3SJohn Marino.Pp 1786d7f5d3SJohn MarinoThe user interface for 1886d7f5d3SJohn Marino.Nm 1986d7f5d3SJohn Marinois implemented by the 2086d7f5d3SJohn Marino.Xr ipfw 8 2186d7f5d3SJohn Marinoprogram. 2286d7f5d3SJohn Marino.Sh KERNEL OPTIONS 2386d7f5d3SJohn MarinoThe following options in the kernel configuration file are related to 2486d7f5d3SJohn Marino.Nm 2586d7f5d3SJohn Marinooperation: 2686d7f5d3SJohn MarinoOptions in the kernel configuration file: 2786d7f5d3SJohn Marino.Bl -tag -width ".Cd options IPFIREWALL_VERBOSE_LIMIT" 2886d7f5d3SJohn Marino.It Cd options IPFIREWALL 2986d7f5d3SJohn Marinoenable 3086d7f5d3SJohn Marino.Nm 3186d7f5d3SJohn Marino.It Cd options IPFIREWALL_VERBOSE 3286d7f5d3SJohn Marinoenable firewall logging 3386d7f5d3SJohn Marino.It Cd options IPFIREWALL_VERBOSE_LIMIT 3486d7f5d3SJohn Marinolimit firewall logging 3586d7f5d3SJohn Marino.It Cd options IPDIVERT 3686d7f5d3SJohn Marinoenable 3786d7f5d3SJohn Marino.Xr divert 4 3886d7f5d3SJohn Marinosockets 3986d7f5d3SJohn Marino.El 4086d7f5d3SJohn Marino.Sh SEE ALSO 4186d7f5d3SJohn Marino.Xr setsockopt 2 , 4286d7f5d3SJohn Marino.Xr divert 4 , 4386d7f5d3SJohn Marino.Xr ip 4 , 4486d7f5d3SJohn Marino.Xr ipfw 8 , 4586d7f5d3SJohn Marino.Xr sysctl 8 , 4686d7f5d3SJohn Marino.Xr syslogd 8 47