CVS commit: [netbsd-8] src/usr.sbin/npf/npfctl

["Martin Husemann" <martin%netbsd.org@localhost>]

Module Name:    src
Committed By:   martin
Date:           Thu Sep 27 14:33:30 UTC 2018

Modified Files:
        src/usr.sbin/npf/npfctl [netbsd-8]: npf.conf.5

Log Message:
Pull up the following, requested by maxv in ticket #1030:

        usr.sbin/npf/npfctl/npf.conf.5  1.71-1.79       (patch)

npf.conf(5): fix some of the previous incorrect or inaccurate changes.
The TCP flags option is not only for the stateful tracking.  Dynamic NAT
implies NAPT; algorithms, at least for now, are for static NAT mappings.
Mention that ALG ICMP is also for traceroute behind NAT; also mention
"MSS clamping" (some users might search for this term, so keeping the
terminology is helpful).

--------------------------------------------------------------------------------

Remove superfluous Pp.

--------------------------------------------------------------------------------

Be clearer about the difference between static vs dynamic interface list,
and slightly improve wording.

My understanding is that when none of inet4/inet6/ifaddrs is passed, NPF
assumes ifaddrs.

--------------------------------------------------------------------------------

New sentence, new line. Use Fn for functions.

--------------------------------------------------------------------------------

Fix the "Interfaces" section, I understood wrong. Talk about inference,
because it was not mentioned before, and it plays an important role.
Discussed with rmind. Probably not the last pass.

--------------------------------------------------------------------------------

Switch back to tabs, it was nicer this way.

--------------------------------------------------------------------------------

Wrap long lines, so that nothing overflows.

--------------------------------------------------------------------------------

Improve markup.

--------------------------------------------------------------------------------

According to the grammar and examples the static table is defined with
"file" keyword, not "static".


To generate a diff of this commit:
cvs rdiff -u -r1.48.4.1 -r1.48.4.2 src/usr.sbin/npf/npfctl/npf.conf.5

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.