1

When I see the official documentation of ipfw or the man pages it seems that it is sometimes incomplete. Specifically, there are a lot of options like,

firewall_myservices
firewall_allowservices

etc., which can be found in many online guides but not in the docs. They're even discussed in the lists.

So I would like to understand if these are unofficial or undocumented options, and if they might be removed at some point in the future since they're not formally documented. More importantly, is there a single comprehensive documentation source for ipfw, short of grokking the source code?

ahron
  • 394
  • 5
  • 20
  • Maybe you should open a bug report too (https://bugs.freebsd.org/bugzilla/). – uzsolt Jun 27 '18 at 12:23
  • Yes, that might actually be a good idea in this case. Just did it https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229363 – ahron Jun 27 '18 at 12:58

1 Answers1

2

So it seems that the options which are left out in the official docs are actually easily found in /etc/rc.firewall, which also happens to have the relevant explanations in the comments.

ahron
  • 394
  • 5
  • 20
  • Then for better results add a patch to your bug report that copies that information into the rc.firewall manual. – JdeBP Jun 28 '18 at 08:50
  • 1
    Haven't looked but man pages will often refer you to the comments in the conf files for more information. General practice on FreeBSD is to look in the conf files also. – Rob Jun 28 '18 at 11:37
  • I think there is no need to start a big fuss on variables in /etc/rc.firewall. Actually, some of oldschool guys usually wipe its contents and write rules by hand ignoring the template. – Mikhail Zakharov Aug 08 '18 at 14:26