From nobody@FreeBSD.org  Thu Mar 29 08:44:52 2012
Return-Path: <nobody@FreeBSD.org>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 52E0A106564A
	for <freebsd-gnats-submit@FreeBSD.org>; Thu, 29 Mar 2012 08:44:52 +0000 (UTC)
	(envelope-from nobody@FreeBSD.org)
Received: from red.freebsd.org (red.freebsd.org [IPv6:2001:4f8:fff6::22])
	by mx1.freebsd.org (Postfix) with ESMTP id 39CD48FC16
	for <freebsd-gnats-submit@FreeBSD.org>; Thu, 29 Mar 2012 08:44:52 +0000 (UTC)
Received: from red.freebsd.org (localhost [127.0.0.1])
	by red.freebsd.org (8.14.4/8.14.4) with ESMTP id q2T8iq1o053012
	for <freebsd-gnats-submit@FreeBSD.org>; Thu, 29 Mar 2012 08:44:52 GMT
	(envelope-from nobody@red.freebsd.org)
Received: (from nobody@localhost)
	by red.freebsd.org (8.14.4/8.14.4/Submit) id q2T8ipIG053010;
	Thu, 29 Mar 2012 08:44:51 GMT
	(envelope-from nobody)
Message-Id: <201203290844.q2T8ipIG053010@red.freebsd.org>
Date: Thu, 29 Mar 2012 08:44:51 GMT
From: Vladimir <tinkae.kel@gmail.com>
To: freebsd-gnats-submit@FreeBSD.org
Subject: Chapter about IPFW in russian handbook (27.6)
X-Send-Pr-Version: www-3.1
X-GNATS-Notify:

>Number:         166482
>Category:       docs
>Synopsis:       Chapter about IPFW in russian handbook (27.6)
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    pluknet
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          doc-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Mar 29 08:50:09 UTC 2012
>Closed-Date:    Mon Apr 23 10:42:46 UTC 2012
>Last-Modified:  Mon Apr 23 10:50:11 UTC 2012
>Originator:     Vladimir
>Release:        8.2
>Organization:
>Environment:
all platforms
>Description:
For now, there is no chapter about IPFW in russian handbook. In .ru net exists some translations of this chapter, but they are pretty poor and comlicated for perception.

>How-To-Repeat:
Go to http://www.freebsd.org/doc/ru_RU.KOI8-R/books/handbook/firewalls-ipfw.html
There is no russian chapter about IPFW
>Fix:
With collegue we've done this job for our internal use. In my opinion, it sounds not bad we're ready to send our version of chapter on russian language. 
File with a translation attached.

Patch attached with submission follows:

31.6 IPFW   

IPFIREWALL (IPFW) -    , ,     FreeBSD.              ,       (           " ",       ,      ).

   IPFW (  /etc/rc.firewall  /etc/rc.firewall6)       ,      .

      IPFW    ,         . IPFW        ,       .   ,            ,    IPFW   .          .

IPFW     ,   -     ,    :  ,       -  (),   divert,     NAT     ,         (dummynet),   fwd rule,    ,    ipstealth. IPFW    IPv4  IPv6.

31.6.1  IPFW   

IPFW     FreeBSD    .     ,   rc.conf   firewall_enable="YES".

      firewall_enable="YES"  rc.conf            :

ipfw2 initialized, divert disabled, rule-based forwarding disabled, default to deny, logging disabled

        -   .               ,   -,   ,    /etc/sysctl.conf.       /etc/sysctl.conf          :

net.inet.ip.fw.verbose=1
net.inet.ip.fw.verbose_limit=5

31.6.2     

        ,     ,        NAT.
         .

options IPFIREWALL

     IPFW    ( ).

options    IPFIREWALL_VERBOSE

      -   ,    IPFW  ,    log. 

options    IPFIREWALL_VERBOSE_LIMIT=5

     syslogd (8),   .        ,        .           syslogd.

options    IPFIREWALL_DEFAULT_TO_ACCEPT

      IPFW    .       IPFW.

options IPDIVERT

       ,    NAT .

:         ,     IPFIREWALL_DEFAULT_TO_ACCEPT       .

31.6.3  /etc/rc.conf   

  :

firewall_enable="YES"

       ,   FreeBSD,      /etc/rc.firewall      :

firewall_type="open"

    :

open --   .

client --    .

simple --   .

closed --   IP     loopback .

UNKNOWN --     .

filename --   ,    . 

         ipfw.   -    firewall_type     ,      ipfw     ipfw.      ,       :

add deny in
add deny out

  -    firewall_script      ,   ipfw,      .           :

#!/bin/sh
 
ipfw -q flush
 
ipfw add deny in
ipfw add deny out

:    firewall_type   client  simple,  ,     /etc/rc.firewall         .  ,   ,    ,   firewall_script  /etc/ipfw.rules.

  :
firewall_logging="YES"

: ,    firewall_logging -     net.inet.ip.fw.verbose    sysctl (  31.6.1).   rc.conf  ,  ,        sysctl      /etc/sysctl.conf

net.inet.ip.fw.verbose_limit=5

     , ..     (NAT)   natd,        32.10      /etc/rc.conf

31.6.4  IPFW   

  ipfw   ,           .         ,     ,  ,     , .   ,                  ,     ipfw.

  ,   ipfw          . 
  IPFW     ,        .     ,       ,     ,   ,       .

   :

# ipfw list

            :

# ipfw -t list

       :
-     ,
-   -   ,   ,
-   -    ,
-   -  .

# ipfw -a list

     . 

# ipfw -d list

    ,  ..     :

# ipfw -d -e list

 :

# ipfw zero

       NUM:

# ipfw zero NUM

31.6.5  IPFW   

  -    ,            ,       .       .        ,    ,   ,      .  TCP/IP  (..: telnet, www, mail,  ..)     () . ,   ,    (   1024)          .    (..   )       ,   ,     .

     ,                    .       ,  ,         .     "  ".           ,     ,   ,   65535,             .

:    ,    count, skipto  tee.

,   ,    ,    ,        keep-state, limit, in, out  via.          .

:  ,       ,         .

31.6.5.1  .   

              .       ,   ipfw(8).

   :          .       bold .      ,              .

 "#"                   .    . 

CMD RULE_NUMBER ACTION LOGGING SELECTION STATEFUL

31.6.5.1.1 CMD   

       add,     .

31.6.5.1.2 RULE_NUMBER   

      1..65535

31.6.5.1.3 ACTION   

    ,   ,       :

allow | accept | pass | permit

    ,    .       ,       .      ,      ,    .

check-state

      .   ,    ,    ,       keep-state  limit.   check-state    .    check-state    ,           keep-state  limit  .

deny | drop

           ,    .      ,      ,    .

31.6.5.1.4 LOGGING   

log  logamount

       ,    log,      syslogd(8)   SECURITY.      ,      ,    log       logamount.    logamount  ,  ,    net.inet.ip.fw.verbose_limit    sysctl.   ,   0  .        ,          .       ipfw reset log.

:                 (/ )  .     ,        .

31.6.5.1.5 SELECTION   

 ,              .       :

udp | tcp | icmp

     ,   /etc/protocols.   ,    /etc/protocols,    .

from src to dst

  from  to     IP .        . any -    ,    IP - . me -    ,     IP ,     FreeBSD.
    from src to dst:
from me to any
from any to me
from 0.0.0.0/0 to any
from any to 0.0.0.0/0
from 0.0.0.0 to any
from any to 0.0.0.0
from me to 0.0.0.0
IP       IP    IP    .   ,   IP    net-mgmt/ipcalc.        http://jodies.de/ipcalc.

port number

 ,   (tcp  udp)      .       .   ,      /etc/services.

in | out

     .   ,      .

via IF

via      ,   IF.

setup

   ,        TCP .

keep-state

        ,     ,        ,        ,      .    .

limit {src-addr | src-port | dst-addr | dst-port}

   ,      ,     N     ,    .         .              limit  keep-state, ..    limit      keep-state.

31.6.5.2     .   

        ,       ,    .               ,      -.  ,      ,  ,  .

  check-state     ,         .
      ,  ,   ;     .         ,      check-state.

     SYN-,       .     ,  FreeBSD      - limit.

31.6.5.3       

    .      , -,     ,           ,     .         .

     ,        ,    .          ,       ,        log.             ,    ICMP .       ,        ,    ,       . 
      ,      .

      ,       -,           . DoS ,       ,     .         ,   syslogd     -,     ,      . 

  IPFIREWALL_VERBOSE_LIMIT=5         syslogd, ,   .   ,      ,   ,   ,   . 

  IPFIREWALL_VERBOSE_LIMIT=5   ,          .  ,         log,          ,   IPFIREWALL_VERBOSE_LIMIT,    -   .  ,  syslogd   200  - ,        200 , ,  ,    :
last message repeated 200 times

     syslogd    SECURITY    /etc/syslogd.conf     FreeBSD   - /var/log/security.

31.6.5.4  ,     

   IPFW  ,    ,   ,        sh-.      ,            ,   .          , ..,  ,      .  ,            ,         ,     .

 ,  ,     : sh, csh, tcsh.          $.     ,         .

            IPFW:

###############   ,   ipfw #############
#
ipfw -q -f flush       #   .
#   .
oif="tun0"             #   , 
                        #  .
odns="192.0.2.11"      # IP DNS  .
cmd="ipfw -q add "     #      ipfw.
ks="keep-state"        #     .
$cmd 00500 check-state
$cmd 00502 deny all from any to any frag
$cmd 00501 deny tcp from any to any established
$cmd 00600 allow tcp from any to any 80 out via $oif setup $ks
$cmd 00610 allow tcp from any to $odns 53 out via $oif setup $ks
$cmd 00611 allow udp from any to $odns 53 out via $oif $ks
################### End of example ipfw rules script ##########################

  ,       -    ,         .

      /etc/ipfw.rules,       :

# sh /etc/ipfw.rules

       ,     FreeBSD    .

        ,     :

# ipfw -q -f flush 
# ipfw -q add check-state
# ipfw -q add deny all from any to any frag
# ipfw -q add deny tcp from any to any established
# ipfw -q add allow tcp from any to any 80 out via tun0 setup keep-state
# ipfw -q add allow tcp from any to 192.0.2.11 53 out via tun0 setup keep-state
# ipfw -q add 00611 allow udp from any to 192.0.2.11 53 out via tun0 keep-state

31.6.5.5       

  ,        NAT,                 .     ,       .  ,     ,  ,  ,         . 

   ,  FreeBSD   lo0    IP  127.0.0.1   .         ,       .

 ,   ,   ,          .   ,   PPP tun0 ,       . 

  ,    ,       ,   ,         .

,      :    ,       ,       .    

   ,    ,       :   -  ,   -  .                ,     .

,        ,    ,    ,    ,     .       proto, port, in/out, via  keep state ,     . ,   tcp     setup,      ,          keep-state.

 ,        , ,        ,   :     ,  ,         .     ,             ,  ,       -   .                      ,   .

    ,             .     .        ,        .        ,    .        ,        /etc/services/    http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers.              ,  : http://www.sans.org/security-resources/idfaq/oddports.php.

31.6.5.6       .    

 ,      ,          .              .     ,   "deny"  ,     .    dc0,    ,   ,       .  ppp    tun0.

    .
-          keep-state.
-         limit        (flooding).
-    in  out     .
-     via interface-name   .
    /etc/ipfw.rules

#######################    IPFW #######################
#       .
ipfw -q -f flush

#   
cmd="ipfw -q add"    #      ipfw
pif="dc0"            #   , 
                      #  
             
########################################################################
#        
#    ,      .
#  xl0      . 
########################################################################
#$cmd 00005 allow all from any to any via xl0

########################################################################
#     
########################################################################
$cmd 00010 allow all from any to any via lo0

########################################################################
#  ,        
#    keep-state
########################################################################
$cmd 00015 check-state

########################################################################
# ,       
# ,   .
#      -  
#         .
########################################################################

#     DNS   
# -
# x.x.x.x    IP  DNS   
# -
#   ,       DNS  
#  
#  IP      /etc/resolv.conf .
$cmd 00110 allow tcp from any to x.x.x.x 53 out via $pif setup keep-state
$cmd 00111 allow udp from any to x.x.x.x 53 out via $pif keep-state

#     DHCP   -
#  cable/DSL .
#      .user ppp.    
#        .
#        IP   -. 
#   IP   -     
#   x.x.x.x    IP     . 
$cmd 00120 allow log udp from any to any 67 out via $pif keep-state
#$cmd 00120 allow udp from any to x.x.x.x 67 out via $pif keep-state

#       www 
$cmd 00200 allow tcp from any to any 80 out via $pif setup keep-state

#       www 
# https   TLS  SSL
$cmd 00220 allow tcp from any to any 443 out via $pif setup keep-state

#   POP/SMTP .
$cmd 00230 allow tcp from any to any 25 out via $pif setup keep-state
$cmd 00231 allow tcp from any to any 110 out via $pif setup keep-state

#   FBSD (make install & cvsup)  
#   root  .
$cmd 00240 allow tcp from me to any out via $pif setup keep-state uid root

#   icmp      ping
$cmd 00250 allow icmp from any to any out via $pif keep-state


#   tcp    Time.
$cmd 00260 allow tcp from any to any 37 out via $pif setup keep-state

#   tcp    nntp news
$cmd 00270 allow tcp from any to any 119 out via $pif setup keep-state

#       FTP, Telnet,  SCP
#     ,    SSH
$cmd 00280 allow tcp from any to any 22 out via $pif setup keep-state

#      whois
$cmd 00290 allow tcp from any to any 43 out via $pif setup keep-state

#       ,      .
#          ,
#          .
$cmd 00299 deny log all from any to any out via $pif


########################################################################
# ,        , 
#   .
#   ,    , 
#       
########################################################################

#       ,    . 
$cmd 00300 deny all from 192.168.0.0/16 to any in via $pif      #   RFC 1918   IP
$cmd 00301 deny all from 172.16.0.0/12 to any in via $pif       #   RFC 1918   IP
$cmd 00302 deny all from 10.0.0.0/8 to any in via $pif          #   RFC 1918   IP
$cmd 00303 deny all from 127.0.0.0/8 to any in via $pif         #  
$cmd 00304 deny all from 0.0.0.0/8 to any in via $pif           #  
$cmd 00305 deny all from 169.254.0.0/16 to any in via $pif      # DHCP -
$cmd 00306 deny all from 192.0.2.0/24 to any in via $pif        # 
$cmd 00307 deny all from 204.152.64.0/23 to any in via $pif     # Sun cluster .
$cmd 00308 deny all from 224.0.0.0/3 to any in via $pif         # D  E  

#     
$cmd 00310 deny icmp from any to any in via $pif

#     113 
$cmd 00315 deny tcp from any to any 113 in via $pif
 
#   Netbios . 137=name, 138=datagram, 139=session
# Netbios  MS/Windows  .
#  MS/Windows hosts2      81
$cmd 00320 deny tcp from any to any 137 in via $pif
$cmd 00321 deny tcp from any to any 138 in via $pif
$cmd 00322 deny tcp from any to any 139 in via $pif
$cmd 00323 deny tcp from any to any 81 in via $pif
 
#    .
$cmd 00330 deny all from any to any frag in via $pif

#   c  ACK,      .
$cmd 00332 deny tcp from any to any established in via $pif
 
#      DHCP  -.     IP   
# DHCP   ,      ,       .
#      DSL .  .user ppp.     ,      . 
#    IP ,      ,     .
$cmd 00360 allow udp from any to x.x.x.x 67 in via $pif keep-state
 
#       www ,     apache .
$cmd 00400 allow tcp from any to me 80 in via $pif setup limit src-addr 2
 
#        FTP, Telnet  SCP   
$cmd 00410 allow tcp from any to me 22 in via $pif setup limit src-addr 2
 
#     Telnet    
#    ,   ID  PW        ,
#   ,     telnet.
$cmd 00420 allow tcp from any to me 23 in via $pif setup limit src-addr 2
 
#           .
$cmd 00499 deny log all from any to any in via $pif
 

#       ,     . 
$cmd 00999 deny log all from any to any
################    IPFW ###############################
  
31.6.5.7         NAT.   

    ,     NAT   IPFW.    FreeBSD    option IPDIVERT    ,  IPFIREWALL.

    IPFW   /etc/rc.conf  :
natd_enable="YES"                   #  NATD 
natd_interface="rl0"                #   ,
                                    #   
natd_flags="-dynamic -m"            # -m =   ,   

       divert natd  (Network Address Translation)     .    check-state  divert natd        .       .          skipto.   skipto    .    skipto   ,    .

    ,   ,            .

            .   ,      .     ,     ,   ;         ,  ,    (  / ).

    100, 101, 450, 500  510    .        ;   keep-state    IP .           (  )    .   ,           skipto     500   .

,        . -    80.     .       100,          in.
      101,                keep-state.    125, , ,    .        ,       ,    .           IP   .    ,     :
 keep-state         ,   .      ,    .     skipto rule 500.  500  (NAT)       .    .
    ,       .        NAT       .       100   IP       IP   .     check-state,  ,  ,           ,     keep-state      . 

          ,       .        check-state        ,   skipto 500.     500,     .
 ,   ,  ,    ,    ,   keep-state,    divert natd.  -    ,     .      ,      .        apache            -.   ,      100   IP     IP.                425.        :       keep-state,            IP,  2  .     
     .
      allow,      .        check-state       .      500,    ,      ,   .

   #1:
#!/bin/sh
cmd="ipfw -q add"
skip="skipto 500"
pif=rl0
ks="keep-state"
good_tcpo="22,25,37,43,53,80,443,110,119"

ipfw -q -f flush

$cmd 002 allow all from any to any via xl0  #     
$cmd 003 allow all from any to any via lo0  #     

$cmd 100 divert natd ip from any to any in via $pif
$cmd 101 check-state

#   
$cmd 120 $skip udp from any to xx.168.240.2 53 out via $pif $ks
$cmd 121 $skip udp from any to xx.168.240.5 53 out via $pif $ks
$cmd 125 $skip tcp from any to any $good_tcpo out via $pif setup $ks
$cmd 130 $skip icmp from any to any out via $pif $ks
$cmd 135 $skip udp from any to any 123 out via $pif $ks


#       ,    . 
$cmd 300 deny all from 192.168.0.0/16  to any in via $pif  #   RFC 1918   IP
$cmd 301 deny all from 172.16.0.0/12   to any in via $pif  #   RFC 1918   IP
$cmd 302 deny all from 10.0.0.0/8      to any in via $pif  #   RFC 1918   IP
$cmd 303 deny all from 127.0.0.0/8     to any in via $pif  #  
$cmd 304 deny all from 0.0.0.0/8       to any in via $pif  #  
$cmd 305 deny all from 169.254.0.0/16  to any in via $pif  # DHCP -
$cmd 306 deny all from 192.0.2.0/24    to any in via $pif  #   
$cmd 307 deny all from 204.152.64.0/23 to any in via $pif  # Sun cluster 
$cmd 308 deny all from 224.0.0.0/3     to any in via $pif  # D  E  

#   
$cmd 400 allow udp from xx.70.207.54 to any 68 in $ks
$cmd 420 allow tcp from any to me 80 in via $pif setup limit src-addr 1


$cmd 450 deny log ip from any to any

#   skipto     ,    . 
$cmd 500 divert natd ip from any to any out via $pif
$cmd 510 allow ip from any to any

#################################     #####################################

  #2:
#!/bin/sh
#################################    IPFW ####################################
#       .
ipfw -q -f flush

#   
cmd="ipfw -q add"
skip="skipto 800"
pif="rl0"     #   , 
              #   

###############################################################################################
#        
#     ,      .
#  xl0   ,   
#  . 
###############################################################################################
$cmd 005 allow all from any to any via xl0

###############################################################################################
#     
###############################################################################################
$cmd 010 allow all from any to any via lo0

###############################################################################################
#          
###############################################################################################
$cmd 014 divert natd ip from any to any in via $pif

###############################################################################################
#  ,        
#    keep-state
###############################################################################################
$cmd 015 check-state

###############################################################################################
# ,       
# ,   .
#      -    
#       .
###############################################################################################

#     DNS   
# -
# x.x.x.x   IP  DNS   
# -
#   ,       DNS  
#  
#  IP      /etc/resolv.conf .
$cmd 020 $skip tcp from any to x.x.x.x 53 out via $pif setup keep-state

#     DHCP   -
#  cable/DSL 
$cmd 030 $skip udp from any to x.x.x.x 67 out via $pif keep-state

#       www 
$cmd 040 $skip tcp from any to any 80 out via $pif setup keep-state

#       www 
# https   TLS  SSL
$cmd 050 $skip tcp from any to any 443 out via $pif setup keep-state

#   POP/SMTP .
$cmd 060 $skip tcp from any to any 25 out via $pif setup keep-state
$cmd 061 $skip tcp from any to any 110 out via $pif setup keep-state

#   FBSD (make install & cvsup)  
#   root  .
$cmd 070 $skip tcp from me to any out via $pif setup keep-state uid root

#   icmp      ping
$cmd 080 $skip icmp from any to any out via $pif keep-state

#   tcp    Time.
$cmd 090 $skip tcp from any to any 37 out via $pif setup keep-state

#   tcp    nntp, news (  news groups)
$cmd 100 $skip tcp from any to any 119 out via $pif setup keep-state

#       FTP, Telnet,  SCP
#     ,    SSH
$cmd 110 $skip tcp from any to any 22 out via $pif setup keep-state

#      whois
$cmd 120 $skip tcp from any to any 43 out via $pif setup keep-state

#   udp   ntp time server
$cmd 130 $skip udp from any to any 123 out via $pif keep-state

###############################################################################################
# ,       ,  
#     ,    , 
#      
###############################################################################################

#       ,    . 
$cmd 300 deny all from 192.168.0.0/16  to any in via $pif  #RFC 1918 private IP
$cmd 301 deny all from 172.16.0.0/12   to any in via $pif  #RFC 1918 private IP
$cmd 302 deny all from 10.0.0.0/8      to any in via $pif  #RFC 1918 private IP
$cmd 303 deny all from 127.0.0.0/8     to any in via $pif  #loopback
$cmd 304 deny all from 0.0.0.0/8       to any in via $pif  #loopback
$cmd 305 deny all from 169.254.0.0/16  to any in via $pif  #DHCP auto-config
$cmd 306 deny all from 192.0.2.0/24    to any in via $pif  #reserved for docs
$cmd 307 deny all from 204.152.64.0/23 to any in via $pif  #Sun cluster
$cmd 308 deny all from 224.0.0.0/3     to any in via $pif  #Class D & E multicast

#     113 
$cmd 315 deny tcp from any to any 113 in via $pif

#   Netbios . 137=name, 138=datagram, 139=session
# Netbios  MS/Windows  .
#  MS/Windows hosts2      81
$cmd 320 deny tcp from any to any 137 in via $pif
$cmd 321 deny tcp from any to any 138 in via $pif
$cmd 322 deny tcp from any to any 139 in via $pif
$cmd 323 deny tcp from any to any 81  in via $pif

#    .
$cmd 330 deny all from any to any frag in via $pif

#   c  ACK,      .
$cmd 332 deny tcp from any to any established in via $pif

#      DHCP  -.   
#   IP    DHCP   , 
#     ,       .
#      DSL .  .user ppp.    
#  ,      . 
#    IP ,      ,   
#  .
$cmd 360 allow udp from x.x.x.x to any 68 in via $pif keep-state

#       www ,    
# apache .
$cmd 370 allow tcp from any to me 80 in via $pif setup limit src-addr 2

#        FTP, Telnet  SCP  
#  
$cmd 380 allow tcp from any to me 22 in via $pif setup limit src-addr 2

#     Telnet    .
#    ,   ID  PW    
#    .
#   ,     telnet.
$cmd 390 allow tcp from any to me 23 in via $pif setup limit src-addr 2

#           .
$cmd 400 deny log all from any to any in via $pif

#           .
$cmd 450 deny log all from any to any out via $pif

#      skipto      .
$cmd 800 divert natd ip from any to any out via $pif
$cmd 801 allow ip from any to any
 
#       ,     . 
$cmd 999 deny log all from any to any
#################################    IPFW ####################################


>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-doc->pluknet 
Responsible-Changed-By: pluknet 
Responsible-Changed-When: Thu Mar 29 09:37:59 UTC 2012 
Responsible-Changed-Why:  
I will look at it. 

http://www.freebsd.org/cgi/query-pr.cgi?pr=166482 
State-Changed-From-To: open->closed 
State-Changed-By: pluknet 
State-Changed-When: Mon Apr 23 10:42:25 UTC 2012 
State-Changed-Why:  
Committed with modifications, thanks! 

http://www.freebsd.org/cgi/query-pr.cgi?pr=166482 

From: dfilter@FreeBSD.ORG (dfilter service)
To: bug-followup@FreeBSD.org
Cc:  
Subject: Re: docs/166482: commit references a PR
Date: Mon, 23 Apr 2012 10:42:12 +0000 (UTC)

 pluknet     2012-04-23 10:42:03 UTC
 
   FreeBSD doc repository
 
   Modified files:
     ru_RU.KOI8-R/books/handbook/firewalls chapter.sgml 
   Log:
   Translate firewalls-ipfw section.
   
   PR:             docs/166482
   Submitted by:   Vladimir <tinkae.kel gmail dott com>
                   (original, plain text version)
   SGML bugs are:  mine
   
   Revision  Changes    Path
   1.8       +1347 -2   doc/ru_RU.KOI8-R/books/handbook/firewalls/chapter.sgml
 _______________________________________________
 cvs-all@freebsd.org mailing list
 http://lists.freebsd.org/mailman/listinfo/cvs-all
 To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
 
>Unformatted:
