Login or Register to Ask a Question and Join Our Community

Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

ipfs(8) [freebsd man page]

IPFS(8) 						      System Manager's Manual							   IPFS(8)

NAME

       ipfs - saves and restores information for NAT and state tables.

SYNOPSIS

       ipfs [-nv] -l

       ipfs [-nv] -u

       ipfs [-nv] [ -d <dirname> ] -R

       ipfs [-nv] [ -d <dirname> ] -W

       ipfs [-nNSv] [ -f <filename> ] -r

       ipfs [-nNSv] [ -f <filename> ] -w

       ipfs [-nNSv] -f <filename> -i <if1>,<if2>

DESCRIPTION

       ipfs  allows  state  information created for NAT entries and rules using keep state to be locked (modification prevented) and then saved to
       disk, allowing for the system to experience a reboot, followed by the restoration of that information, resulting in connections	not  being
       interrupted.

OPTIONS

       -d     Change the default directory used with -R and -W options for saving state information.

       -n     Don't actually take any action that would affect information stored in the kernel or on disk.

       -v     Provides a verbose description of what's being done.

       -i <ifname1>,<ifname2>
	      Change  all  instances  of  interface  name ifname1 in the state save file to ifname2.  Useful if you're restoring state information
	      after a hardware reconfiguration or change.

       -N     Operate on NAT information.

       -S     Operate on filtering state information.

       -u     Unlock state tables in the kernel.

       -l     Lock state tables in the kernel.

       -r     Read information in from the specified file and load it into the kernel.	This requires the state tables to have already been locked
	      and does not change the lock once complete.

       -w     Write  information  out  to  the specified file and from the kernel.  This requires the state tables to have already been locked and
	      does not change the lock once complete.

       -R     Restores all saved state information, if any, from two files, ipstate.ipf and ipnat.ipf, stored in the /var/db/ipf directory  unless
	      otherwise specified by the -d option.  The state tables are locked at the beginning of this operation and unlocked once complete.

       -W     Saves  in-kernel	state information, if any, out to two files, ipstate.ipf and ipnat.ipf, stored in the /var/db/ipf directory unless
	      otherwise specified by the -d option.  The state tables are locked at the beginning of this operation and unlocked once complete.

FILES

       /var/db/ipf/ipstate.ipf
       /var/db/ipf/ipnat.ipf
       /dev/ipl
       /dev/ipstate
       /dev/ipnat

SEE ALSO

       ipf(8), ipl(4), ipmon(8), ipnat(8)

DIAGNOSTICS

       Perhaps the -W and -R operations should set the locking but rather than undo it, restore it to what  it	was  previously.   Fragment  table
       information is currently not saved.

BUGS

       If you find any, please send email to me at darrenr@pobox.com

																	   IPFS(8)

Check Out this Related Man Page

IPNAT(8)						      System Manager's Manual							  IPNAT(8)

NAME

       ipnat - user interface to the NAT subsystem

SYNOPSIS

       ipnat [ -dhlnrsvCF ] [ -M core ] [ -N system ] -f <filename>

DESCRIPTION

       ipnat  opens the filename given (treating "-" as stdin) and parses the file for a set of rules which are to be added or removed from the IP
       NAT.

       Each rule processed by ipnat is added to the kernels internal lists if there are no parsing problems.  Rules are added to the  end  of  the
       internal lists, matching the order in which they appear when given to ipnat.

       Note  that ipf(8) must be enabled (with ipf -E) before NAT is configured, as the same kernel facilities are used for NAT functionality.	In
       addition, packet forwarding must be enabled.  These details may be handled automatically when ipnat is run by rc at normal system  startup.
       See options(4), sysctl(8), and rc.conf(5) for more information.

OPTIONS

       -C     delete all entries in the current NAT rule listing (NAT rules)

       -d     Enable printing of some extra debugging information.

       -F     delete all active entries in the current NAT translation table (currently active NAT mappings)

       -h     Print number of hits for each MAP/Redirect filter.

       -l     Show the list of current NAT table entry mappings.

       -n     This  flag  (no-change)  prevents ipf from actually making any ioctl calls or doing anything which would alter the currently running
	      kernel.

       -r     Remove matching NAT rules rather than add them to the internal lists.

       -s     Retrieve and display NAT statistics.

       -v     Turn verbose mode on.  Displays information relating to rule processing and active rules/table entries.

FILES

       /dev/ipnat
       /usr/share/examples/ipf	Directory with examples.

DIAGNOSTICS

       ioctl(SIOCGNATS): Input/output error Ensure that the necessary kernel functionality is present and ipf enabled with ipf -E.

SEE ALSO

       ipnat(5), rc.conf(5), ipf(8), ipfstat(8)

																	  IPNAT(8)
Man Page