os/doc
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
50372 commits 1 branch 79 tags 298 MiB
Commit graph

202 commits

Author SHA1 Message Date
Denis Peplin
60329bff15 Small whitespace fix (for lines missed in previous fix) 
Translators can ignore
 2005-03-09 11:32:15 +00:00
Xin LI
930f075192 When talking about avoiding information disclosure, we generally 
say we will be able to delay the actual break-in, since crackers
can still manage to get into the system if there is a hole.  So,
prefer saying "we can delay the actual attack" rather than "the
system is more secure".

Reviewed by:	trhodes
 2005-03-08 08:15:50 +00:00
Simon L. B. Nielsen
72a75ac933 Improve some mark-up and wording a bit. 2005-03-05 00:30:36 +00:00
Simon L. B. Nielsen
88e11abb3d - Whitespace cleanup which change rendered output. Should not be 
ignored by translators.
- Fix some English grammar.
- Add missing punctuation.

Submitted by:	Siebrand Mazeland <s.mazeland@xs4all.nl>
 2005-03-04 23:21:07 +00:00
Simon L. B. Nielsen
5daadaaa0e Whitespace cleanup. No content change - translators can ignore. 
Submitted by:	Siebrand Mazeland <s.mazeland@xs4all.nl>
No objections:	-doc
 2005-03-04 23:11:23 +00:00
Denis Peplin
8a02bc7059 Add warning to describe relation between rc.conf firewall_logging variable and 
sysctl net.ip.fw.verbose variable; suggest to set net.inet.ip.fw.verbose_limit
variable via sysctl.conf (it is impossible to set it via rc.conf variables).

Discussed with (and my English fixed by):	trhodes
 2005-03-04 08:04:06 +00:00
Simon L. B. Nielsen
70c3e505a0 Add information on setting up ATLQ. 
PR:		docs/78096
Submitted by:	Brad Davis <so14k@so14k.com>
Input from:	mlaier, trhodes
 2005-03-01 21:45:02 +00:00
Simon L. B. Nielsen
e76a5c0df4 Lan -> LAN in the firewall section. 
PR:		docs/78120
Submitted by:	Brad Davis <so14k@so14k.com>
 2005-02-26 16:04:36 +00:00
Denis Peplin
f289e524dc Note that the search continues after count, skipto and tee rules. 2005-02-25 12:12:20 +00:00
Denis Peplin
cb0cdc678c s/RULE#/RULE_NUMBER/ to not to mix with comments that was noted above 2005-02-25 11:43:46 +00:00
Denis Peplin
5efe9d3163 Mark a few annoying things in addition to marked ones 2005-02-25 11:39:12 +00:00
Denis Peplin
1a5ab23a37 Obtain yet another text from old security chapter (rev. 1.229) 
to replace IPFIREWALL_VERBOSE_LIMIT description.

Improved by:	trhodes
 2005-02-25 09:07:37 +00:00
Denis Peplin
a4ef4737ba "only way -> one of the ways" for testing rules via counters 2005-02-25 07:59:32 +00:00
Denis Peplin
8d8b75c568 Fix instructions related to IPFW logging. 2005-02-25 07:43:07 +00:00
Simon L. B. Nielsen
a01576d36a Remove more contractions. 
PR:		docs/77775
Submitted by:	Siebrand Mazeland <s.mazeland@xs4all.nl>
 2005-02-20 14:11:46 +00:00
Simon L. B. Nielsen
dc9009c533 Remove more contractions. 
Submitted by:	Joel Dahl <joel@automatvapen.se>
 2005-02-20 14:04:14 +00:00
Simon L. B. Nielsen
5c16ea2707 Remove some contractions. 
Submitted by:	Joel Dahl <joel@automatvapen.se>
PR:		docs/77729
 2005-02-19 14:03:54 +00:00
Denis Peplin
b0883cea4b Add id to "Building the Rule Script with Symbolic Substitution" section 
and fix xref to this section.
 2005-02-18 12:08:24 +00:00
Denis Peplin
20496a58ed Rewrite warning about remote firewall setup. 
New version mostly obtained from old security
chapter (rev. 1.229).

With fixes from:	simon, roam
 2005-02-18 11:37:11 +00:00
Denis Peplin
48da93688b note -> warning, remove "should use" comment 2005-02-15 15:09:42 +00:00
Denis Peplin
3a9eb81f2b Change title for "Building the Rule Script" section to 
"Building the Rule Script with Symbolic Substitution"

Reviewed by:	remko
 2005-02-14 14:25:44 +00:00
Simon L. B. Nielsen
8ddd739127 Be consistent and change '[P|p]orts collection' -> 'Ports Collection' 
as per the FDP Primer word list.

Submitted by:	Siebrand Mazeland <s.mazeland@xs4all.nl>
PR:		docs/76324
 2005-02-13 10:24:10 +00:00
Denis Peplin
fcfbda4af0 1.32 -> 1/32 for ipnat keyword, use <literal where needed. 
PR:		docs/77131 (slightly modified)
Submitted by:	Brad Davis <so14k@so14k.com>
 2005-02-11 09:01:51 +00:00
Denis Peplin
67cb7c0895 Move from "programlisting" and "command" to 
"screen" and "userinput" where needed
 2005-02-11 08:03:22 +00:00
Denis Peplin
12a71f864c Fix several minor grammatical and spelling errors, 
changes several <programlisting> and <command> sections to <screen>,
<literal> and <userinput> where required

PR:		docs/77370 (slightly modified)
Submitted by:	David Adam <zanchey@ucc.gu.uwa.edu.au>
 2005-02-11 07:24:19 +00:00
Denis Peplin
93d6b0bfe6 Add missing dot after sentence 2005-02-10 12:20:03 +00:00
Denis Peplin
3d805d8a5a Improve "Building the Rule Script" section by adding description of 
converting script to rule list (the example already contain this way,
but it was not described).
 2005-02-10 12:04:02 +00:00
Denis Peplin
e761303db8 Remove "replaceable" tag around syslogd in "killall -HUP" command 
Reviewed by:	simon
 2005-02-08 07:47:55 +00:00
Martin Heinen
4c758e5551 Add a missing ;. 2005-02-05 15:16:24 +00:00
Martin Heinen
45ade4e6e9 Index the Firewall chapter and the IPsec section. 
Instead of "user configuration files" explicitly
list the files ".k5login" and ".k5users".
 2005-02-05 12:42:20 +00:00
Hideyuki KURASHINA
2be7224e0e Use &man.pf.4; instead of &man.pf.9;. 2005-01-28 17:37:00 +00:00
Giorgos Keramidas
0b05d143ee Describe in as much detail as possible the availability of PF for the 
entire range of FreeBSD versions that may be in use out there.  The
tabular layout doesn't look exactly perfect, but this is a stylesheet
issue, which we can fix separately.

Some info by:	mlaier
Discussed with:	Brad Davis <so14k@so14k.com>
 2005-01-28 15:31:26 +00:00
Denis Peplin
e3dfd245f0 - &os; 4 -> &os;&nbsp;4.X 
- put <application></application> around Syslogd
- move dot out from quotes
- explain "can be considered short" in comment (can be useful later)
- restart -> reload for re-reading syslog.conf
 2005-01-28 08:36:55 +00:00
Giorgos Keramidas
75ac7db4f3 Tweak a bit the wording about the versions of FreeBSD that support 
the pf(9) firewall.

PR:		docs/76750
Submitted by:	Brad Davis <so14k@so14k.com>
Reviewed by:	mlaier
 2005-01-27 15:27:49 +00:00
Giorgos Keramidas
705de0f9f8 Various punctuation fixes. 
PR:		docs/76600
Submitted by:	Brad Davis <so14k@so14k.com>
 2005-01-23 21:05:58 +00:00
Giorgos Keramidas
2c7b8e0e6b + Many punctuation and wording fixes: 
- Whitespace before punctuation was removed.
  - Numbers below 10 are spelled out as words.
  - Reworded some sentences and added missing words.

+ Added a note about periodically flushing firewall rules to make sure
  one is not locked out while tinkering with rulesets.

PR:		docs/76533
Submitted by:	Brad Davis <so14k@so14k.com>
 2005-01-21 14:33:01 +00:00
Peter Pentchev
52b9a67c85 In the spirit of the previous Block -> block change, syslog levels 
are usually spelled in lowercase, so change Local0 -> local0, too.
 2005-01-21 10:21:20 +00:00
Marc Fonvieille
0cbea2d0d0 Typo. 
PR:		docs/76521
Submitted by:	Brad Davis <so14k@so14k.com>
 2005-01-21 10:07:16 +00:00
Martin Heinen
d2202fe114 Add/repair closing tags. 
Submitted by:	doclint
 2005-01-12 01:55:04 +00:00
Ceri Davies
d701692c51 Clarify some dates regarding the integration of PF into FreeBSD. 
Confusion noted in:

PR:		docs/75694
Submitted by:	Marian Cerny <jojo at matfyz dot cz>
 2005-01-01 17:53:33 +00:00
Ceri Davies
7ee4599e30 Kill one last instance of "NIC card". 2005-01-01 13:18:52 +00:00
Ceri Davies
e3eddb46cd Apply various grammar, capitalisation and other fixes from the PR below, 
along with some others that I noticed while reviewing the patch.

PR:		docs/75422
Submitted by:	Matteo Riondato <rionda at gufi dot org>
 2005-01-01 13:15:48 +00:00
Giorgos Keramidas
d26fc05d94 Clean up a bit the description of `device pf'. 
Noticed by:	Matteo Riondato <rionda@gufi.org>
 2004-12-22 07:51:45 +00:00
Simon L. B. Nielsen
8fd665c892 Miscellaneous improvements of the first two sections: 
- Don't state that firewalls and stateful filtering will always
  improve security, since that might not be the case.
- Change the Firewall Rulesets section to a more general Firewall
  Concepts section.
- Remove some basic network text which the user should already know when
  reading about more advanced topics, like firewalls.
- Miscellaneous rewording.

Reviewed by:	-doc
Improvments by:	remko, David Adam <zanchey@ucc.gu.uwa.edu.au>
 2004-12-16 22:45:35 +00:00
Denis Peplin
ac6ca5366c Add few "option", "command", and "filename" tags 
Huge amount of tags in this chapter still missed
 2004-12-15 15:08:34 +00:00
Remko Lodder
a4f39c16da Insert information about PF in the Firewall Software Applications 
section.

Approved by:		simon (mentor)
 2004-12-13 22:37:36 +00:00
Simon L. B. Nielsen
1ba2385f57 - Remove contractions. 
- Use the serial comma.
- Correct spelling.

PR:		docs/74720
Submitted by:	Joel Dahl <joel@automatvapen.se>
 2004-12-12 23:21:03 +00:00
Remko Lodder
1bf4f606a1 Add the emacs for the firewalls chapter. 
Approved by:	simon (mentor)
 2004-12-12 19:47:55 +00:00
Denis Peplin
da6c9d35a5 Point to NOTES kernel source sample by default and to LINT for 4.X 2004-12-08 14:20:02 +00:00
Denis Peplin
f1fa0ccc3e Capitalize letter 2004-12-08 13:51:41 +00:00