From 45a05bcfa387b461160cf7de4c417528ca72b606 Mon Sep 17 00:00:00 2001 From: bycn82 Date: Thu, 19 Nov 2015 15:03:04 +0000 Subject: [PATCH] --- docs/ipfw2/index.mdwn | 20 +++++++++++++------- 1 file changed, 13 insertions(+), 7 deletions(-) diff --git a/docs/ipfw2/index.mdwn b/docs/ipfw2/index.mdwn index d3be4c2d..ebdac789 100644 --- a/docs/ipfw2/index.mdwn +++ b/docs/ipfw2/index.mdwn @@ -62,7 +62,7 @@ the "from any to any" actually is just try to make the rule more human-readable. All modern CPUs are having mutil-cores, and each core are running independently. So the LWKT of DragonflyBSD is the best way to fully utilize the CPU power. by duplicating the environment for each CPU, all the CPU can run as fast as it can without any interference. So it is a lockless and stateful firewall. -# Features +# Basic Configuration ## Core Framework @@ -157,14 +157,20 @@ Filter 'to' supports same parameters as filter 'from' O_DUMMYNET_PIPE, O_DUMMYNET_QUEUE, -## Advanced Features +# Advanced Configuration -**Lookup Table** +## Lookup Table -**Enhanced Forwarding** +## Enhanced Forwarding -**General BPF Filtering** +## General BPF Filtering -**Stateful** +## Stateful -**In-Kernel NAT** +## In-Kernel NAT + +#Additional Topics + +## Logging + +# Example Rules -- 2.41.0