bin/41109: manual page for ipf.conf descripbes only parts of the syntax

[Wolfgang.Stukenbrock%nagler-company.com@localhost]

>Number:         41109
>Category:       bin
>Synopsis:       manual page for ipf.conf descripbes only parts of the syntax
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Tue Mar 31 15:00:00 +0000 2009
>Originator:     Wolfgang Stukenbrock
>Release:        NetBSD 4.0
>Organization:
Dr. Nagler & Company GmbH
        
>Environment:
        
        
System: NetBSD s012 4.0 NetBSD 4.0 (NSW-S012) #9: Fri Mar 13 12:31:52 CET 2009 
wgstuken@s012:/usr/src/sys/arch/amd64/compile/NSW-S012 amd64
Architecture: x86_64
Machine: amd64
>Description:
        The description of the grammar in the manual page for ipf.conf is 
incomplete.
        Some keyword are missing - e.g. "in-via" or "out-via". Also the way to 
define interface lists or interface names for both directions
        are missing.
        This makes it very hard to setup correct filter rules - especialy if 
you are using source address routing on the same machine ...
        It takes hours to debug the kernel to find out what is gooing wrong and 
to locate the problem in the config file.
        If the manual would have been complete, the sollution should be clear 
to the reader in a short time.
        It is not (or at least should not be) the normal way, that it is 
nessesary to consult the sources in order to find out config file options.
>How-To-Repeat:
        try e.g. to find the keyword "in-via" or "out-via" in the manual, or 
the definition of interface lists.
        You will not find them there or any hint, that there may be more 
possible and a reference to another document.
>Fix:
        Check the grammar defined in /usr/src/dist/ipf/tools/ipf_y.y and put it 
into the manual page.
        Perhaps that would be an good idea for the other ipf-tools too ...

>Unformatted: