- NetBSD Manual Pages
Powered by man-cgi (2021-06-01).
Maintained for NetBSD
by Kimmo Suominen.
Based on man-cgi by Panagiotis Christias.
ippool - user interface to the IPFilter pools
ippool -a [-dnv] [-m <name>] [-o <role>] [-t <type>] [-T ttl] -i
ippool -A [-dnv] [-m <name>] [-o <role>] [-S <seed>] [-t <type>]
ippool -f <file> [-dnuv]
ippool -F [-dv] [-o <role>] [-t <type>]
ippool -l [-dv] [-m <name>] [-t <type>]
ippool -r [-dnv] [-m <name>] [-o <role>] [-t <type>] -i <ipaddr>[/<net-
ippool -R [-dnv] [-m <name>] [-o <role>] [-t <type>]
ippool -s [-dtv] [-M <core>] [-N <namelist>]
Ippool is used to manage information stored in the IP pools subsystem
of IPFilter. Configuration file information may be parsed and loaded
into the kernel, currently configured pools removed or changed as well
The command line options used are broken into two sections: the global
options and the instance specific options.
-d Toggle debugging of processing the configuration file.
-n This flag (no-change) prevents ippool from actually making any
ioctl calls or doing anything which would alter the currently
-v Turn verbose mode on.
-a Add a new data node to an existing pool in the kernel.
-A Add a new (empty) pool to the kernel.
Read in IP pool configuration information from the file and load
it into the kernel.
-F Flush loaded pools from the kernel.
-l Display a list of pools currently loaded into the kernel.
-r Remove an existing data node from a pool in the kernel.
-R Remove an existing pool from within the kernel.
-s Display IP pool statistical information.
Sets the IP address for the operation being undertaken with an
all-one's mask or, optionally, a specific netmask given in
either the dotted-quad notation or a single integer.
Sets the pool name for the current operation.
Specify an alternative path to /dev/kmem to retrieve statistical
Specify an alternative path to lookup symbol name information
from when retrieving statistical information.
Sets the role with which this pool is to be used. Currently
only ipf, auth and count are accepted as arguments to this
Sets the hashing seed to the number specified. Only for use
with hash type pools.
Sets the type of pool being defined. Myst be one of tree, hash,
Sets the expiration of the node being added. The timeout is
expressed as a number of seconds. tree, hash, group-map.
-u When parsing a configuration file, rather than load new pool
data into the kernel, unload it.
ippool(5), ipf(8), ipfstat(8)