From nobody@FreeBSD.org  Mon Mar  8 01:59:40 2010
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 66F7C106564A
	for <freebsd-gnats-submit@FreeBSD.org>; Mon,  8 Mar 2010 01:59:40 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21])
	by mx1.freebsd.org (Postfix) with ESMTP id 570348FC13
	for <freebsd-gnats-submit@FreeBSD.org>; Mon,  8 Mar 2010 01:59:40 +0000 (UTC)
Received: from www.freebsd.org (localhost [127.0.0.1])
	by www.freebsd.org (8.14.3/8.14.3) with ESMTP id o281xe9r075024
	for <freebsd-gnats-submit@FreeBSD.org>; Mon, 8 Mar 2010 01:59:40 GMT
	(envelope-from nobody@www.freebsd.org)
Received: (from nobody@localhost)
	by www.freebsd.org (8.14.3/8.14.3/Submit) id o281xdSk075023;
	Mon, 8 Mar 2010 01:59:39 GMT
	(envelope-from nobody)
Message-Id: <201003080159.o281xdSk075023@www.freebsd.org>
Date: Mon, 8 Mar 2010 01:59:39 GMT
From: Joe Barbish <fbsd1@a1poweruser.com>
To: freebsd-gnats-submit@FreeBSD.org
Subject: IPFW doc change
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         144543
>Category:       docs
>Synopsis:       [handbook] IPFW doc change
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    issyl0
>State:          closed
>Quarter:        
>Keywords:       handbook
>Date-Required:  
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Mon Mar 08 02:00:03 UTC 2010
>Closed-Date:    Thu Jul 26 23:15:52 UTC 2012
>Last-Modified:  Thu Jul 26 23:20:06 UTC 2012
>Originator:     Joe Barbish
>Release:        8.0 release
>Organization:
n/a
>Environment:
>Description:
IPFW has changed since the time when the IPFW section was written and it's nolonger required to compile IPFW into the FreeBSD kernel to get NAT functionality. Changes need to be done in 2 different places.

The following is in the handbook now

30.6.1 Enabling IPFW
IPFW is included in the basic FreeBSD install as a separate run time loadable module. The system will dynamically load the kernel module when the rc.conf statement firewall_enable="YES" is used. There is no need to compile IPFW into the FreeBSD kernel unless NAT functionality is desired.


Change the last sentance to read.

There is no need to compile IPFW into the FreeBSD kernel.


The following is in the handbook now

30.6.2 Kernel Options
It is not a mandatory requirement to enable IPFW by compiling the following options into the FreeBSD kernel, unless NAT functionality is required. It is presented here as background information.

Change to this

30.6.2 Kernel Options
It is not a mandatory requirement to enable IPFW by compiling the following options into the FreeBSD kernel. It is presented here as background information only.


>How-To-Repeat:

>Fix:


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-doc->chinsan 
Responsible-Changed-By: chinsan 
Responsible-Changed-When: Mon Mar 21 17:51:26 UTC 2011 
Responsible-Changed-Why:  
I'll take this 

http://www.freebsd.org/cgi/query-pr.cgi?pr=144543 
Responsible-Changed-From-To: chinsan->issyl0 
Responsible-Changed-By: issyl0 
Responsible-Changed-When: Thu Jul 26 22:15:22 UTC 2012 
Responsible-Changed-Why:  
Take this, as discussed with gjb. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=144543 
State-Changed-From-To: open->closed 
State-Changed-By: issyl0 
State-Changed-When: Thu Jul 26 23:15:51 UTC 2012 
State-Changed-Why:  
This has now been committed.  Thanks for reporting the problem, and 
sorry for the delay! 

http://www.freebsd.org/cgi/query-pr.cgi?pr=144543 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: docs/144543: commit references a PR
Date: Thu, 26 Jul 2012 23:12:38 +0000 (UTC)

 Author: issyl0
 Date: Thu Jul 26 23:12:22 2012
 New Revision: 39270
 URL: http://svn.freebsd.org/changeset/doc/39270
 
 Log:
   There is no need to compile IPFW into the FreeBSD kernel to make use of NAT
   functionality anymore, so remove these sentences.
   
   PR:		docs/144543
   Approved by:	gjb (mentor)
 
 Modified:
   head/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml
 
 Modified: head/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml
 ==============================================================================
 --- head/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml	Thu Jul 26 14:27:36 2012	(r39269)
 +++ head/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml	Thu Jul 26 23:12:22 2012	(r39270)
 @@ -2131,8 +2131,7 @@ pass in quick on rl0 proto tcp from any 
  	run time loadable module.  The system will dynamically load the
  	kernel module when the <filename>rc.conf</filename> statement
  	<literal>firewall_enable="YES"</literal> is used.  There is no
 -	need to compile IPFW into the &os; kernel unless
 -	<acronym>NAT</acronym> functionality is desired.</para>
 +	need to compile IPFW into the &os; kernel.</para>
  
        <para>After rebooting your system with
  	<literal>firewall_enable="YES"</literal> in
 @@ -2180,9 +2179,8 @@ net.inet.ip.fw.verbose_limit=5</programl
        </indexterm>
  
        <para>It is not a mandatory requirement to enable IPFW by
 -	compiling the following options into the &os; kernel, unless
 -	<acronym>NAT</acronym> functionality is required.  It is presented here
 -	as background information.</para>
 +	compiling the following options into the &os; kernel.  It is
 +	presented here as background information only.</para>
  
        <programlisting>options    IPFIREWALL</programlisting>
  
 _______________________________________________
 svn-doc-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/svn-doc-all
 To unsubscribe, send any mail to "svn-doc-all-unsubscribe@freebsd.org"
 
>Unformatted:
