diff --git a/doc/fwknopd.man.asciidoc b/doc/fwknopd.man.asciidoc index 811f9417..20af2124 100644 --- a/doc/fwknopd.man.asciidoc +++ b/doc/fwknopd.man.asciidoc @@ -88,7 +88,7 @@ COMMAND-LINE OPTIONS will preserve the command line options that were supplied to the original *fwknopd* process but will force *fwknopd* to re-read the 'fwknopd.conf' and 'access.conf' files. This will also force a - flush of the current ``FWKNOP'' Netfilter chain(s). + flush of the current ``FWKNOP'' iptables chain(s). *--rotate-digest-cache*:: Rotate the digest cache file by renaming it to ``-old'', and @@ -383,8 +383,9 @@ Defines all knock sequences and access control directives. DEPENDENCIES ------------ -The *fwknopd* daemon requires a functioning Netfilter firewall on the -underlying operating system. +The *fwknopd* daemon requires a functioning firewall on the underlying +operating system. Supported firewalls as of the fwknop-2.0 release are +iptables, ipfw, and pf. DIAGNOSTICS @@ -402,7 +403,7 @@ fwknop(8), iptables(8), libfko docmentation. AUTHOR ------ -Damien Stuart , +Damien Stuart , Michael Rash diff --git a/server/fwknopd.8.in b/server/fwknopd.8.in index 3a8b470c..21cd8d4d 100644 --- a/server/fwknopd.8.in +++ b/server/fwknopd.8.in @@ -122,7 +122,7 @@ to re\-read the \fIfwknopd\&.conf\fR and \fIaccess\&.conf\fR -files\&. This will also force a flush of the current \(lqFWKNOP\(rq Netfilter chain(s)\&. +files\&. This will also force a flush of the current \(lqFWKNOP\(rq iptables chain(s)\&. .RE .PP \fB\-\-rotate\-digest\-cache\fR @@ -460,7 +460,8 @@ Defines all knock sequences and access control directives\&. .RE .SH "DEPENDENCIES" .sp -The \fBfwknopd\fR daemon requires a functioning Netfilter firewall on the underlying operating system\&. +The \fBfwknopd\fR daemon requires a functioning firewall on the underlying operating system\&. +Supported firewalls as of the fwknop\-2\&.0 release are iptables, ipfw, and pf\&. .SH "DIAGNOSTICS" .sp \fBfwknopd\fR can be run in debug mode by combining the \fB\-f, \-\-foreground\fR and the \fB\-v, \-\-verbose\fR command line options\&. This will disable daemon mode execution, and print verbose information to the screen on stderr as packets are received\&.