Changeset 1217

Show
Ignore:
Timestamp:
08/16/08 15:32:42 (3 months ago)
Author:
mbr
Message:

documentation fixes in fwknop(8) from Mike Holzmann

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • fwknop/trunk/CREDITS

    r1211 r1217  
    238238      two messages above will result in the packet data being discarded before 
    239239      it is sent through any decryption function. 
     240    - Suggested documentation fixes in the fwknop(8) man page. 

  • fwknop/trunk/fwknop.8

    r1169 r1217  
    77\- Firewall Knock Operator 
    88.SH SYNOPSIS 
    9 .B fwknop \-A <ports> \-D <host> [options] 
     9.B fwknop \-A <ports> -R|-a|-s \-D <host> [options] 
    1010.SH DESCRIPTION 
    1111 
    …… 
    100100 
    101101.TP 
    102 .BR \-D "\fR,\fP " \-\^\-target\ \<IP-address> 
     102.BR \-D "\fR,\fP " \-\^\-Destination\ \<IP-address> 
    103103Direct the 
    104104.B fwknop 
    …… 
    121121.B fwknopd 
    122122does not require this argument. 
     123.TP 
     124.BR -R|-a|-s 
     125One of these options (see below) is required to tell the remote 
     126.B fwknopd 
     127daemon what IP should be let through the local firewall.  It is recommend to use 
     128the -R or -a options instead of -s in order to harden SPA communications against 
     129possible MITM attacks. 
    123130 
    124131.SH OPTIONS 
    125132 
    126133.TP 
    127 .BR \-a "\fR,\fP " \-\^\-allow-ip\ \<allow-IP> 
     134.BR \-a "\fR,\fP " \-\^\-allow-IP\ \<IP-address> 
    128135Specify IP address that should be permitted through the destination 
    129136.B fwknopd