3 --- pppd/pppd.8.orig 2004-11-13 13:22:49.000000000 +0100
5 @@ -57,6 +57,24 @@ for the serial device. On systems such
6 4.4BSD and NetBSD, any speed can be specified. Other systems
7 (e.g. Linux, SunOS) only support the commonly-used baud rates.
9 +.B active-filter-in \fIfilter-expression
11 +.B active-filter-out \fIfilter-expression
12 +Specifies an incoming and outgoing packet filter to be applied to data
13 +packets to determine which packets are to be regarded as link activity,
14 +and therefore reset the idle timer, or cause the link to be brought up
15 +in demand-dialing mode. This option is useful in conjunction with the
16 +\fBidle\fR option if there are packets being sent or received
17 +regularly over the link (for example, routing information packets)
18 +which would otherwise prevent the link from ever appearing to be idle.
19 +The \fIfilter-expression\fR syntax is as described for tcpdump(8),
20 +except that qualifiers which are inappropriate for a PPP link, such as
21 +\fBether\fR and \fBarp\fR, are not permitted. Generally the filter
22 +expression should be enclosed in single-quotes to prevent whitespace
23 +in the expression from being interpreted by the shell. This option
24 +is currently only available under NetBSD, and then only
25 +if both the kernel and pppd were compiled with PPP_FILTER defined.
28 This option sets the Async-Control-Character-Map (ACCM) for this end
29 of the link. The ACCM is a set of 32 bits, one for each of the
30 @@ -167,7 +185,7 @@ Note that for the IPv6 protocol, the MRU
31 Set the MTU [Maximum Transmit Unit] value to \fIn\fR. Unless the
32 peer requests a smaller value via MRU negotiation, pppd will
33 request that the kernel networking code send data packets of no more
34 -than \fIn\fR bytes through the PPP network interface. Note that for
35 +than \fIn\fR bytes through the PPP network interface. Note that for
36 the IPv6 protocol, the MTU must be at least 1280.
39 @@ -177,11 +195,11 @@ peer, pppd will then just wait passively
40 the peer, instead of exiting, as it would without this option.
43 -.I <local_IP_address>\fB:\fI<remote_IP_address>
44 +.I \*[Lt]local_IP_address\*[Gt]\fB:\fI\*[Lt]remote_IP_address\*[Gt]
45 Set the local and/or remote interface IP addresses. Either one may be
46 omitted. The IP addresses can be specified with a host name or in
47 decimal dot notation (e.g. 150.234.56.78). The default local
48 -address is the (first) IP address of the system (unless the
49 +address is the (first) IP address of the hostname of the system (unless the
51 option is given). The remote address will be obtained from the peer
52 if not specified in any option. Thus, in simple cases, this option is
53 @@ -191,7 +209,7 @@ will not accept a different value from t
54 negotiation, unless the \fIipcp\-accept\-local\fR and/or
55 \fIipcp\-accept\-remote\fR options are given, respectively.
57 -.B ipv6 \fI<local_interface_identifier>\fR,\fI<remote_interface_identifier>
58 +.B ipv6 \fI\*[Lt]local_interface_identifier\*[Gt]\fR,\fI\*[Lt]remote_interface_identifier\*[Gt]
59 Set the local and/or remote 64-bit interface identifier. Either one may be
60 omitted. The identifier must be specified in standard ascii notation of
61 IPv6 addresses (e.g. ::dead:beef). If the
62 @@ -199,18 +217,18 @@ IPv6 addresses (e.g. ::dead:beef). If th
63 option is given, the local identifier is the local IPv4 address (see above).
64 On systems which supports a unique persistent id, such as EUI\-48 derived
65 from the Ethernet MAC address, \fIipv6cp\-use\-persistent\fR option can be
66 -used to replace the \fIipv6 <local>,<remote>\fR option. Otherwise the
67 +used to replace the \fIipv6 \*[Lt]local\*[Gt],\*[Lt]remote\*[Gt]\fR option. Otherwise the
68 identifier is randomized.
70 .B active\-filter \fIfilter\-expression
71 Specifies a packet filter to be applied to data packets to determine
72 which packets are to be regarded as link activity, and therefore reset
73 -the idle timer, or cause the link to be brought up in demand-dialling
74 +the idle timer, or cause the link to be brought up in demand-dialing
75 mode. This option is useful in conjunction with the
76 \fBidle\fR option if there are packets being sent or received
77 regularly over the link (for example, routing information packets)
78 which would otherwise prevent the link from ever appearing to be idle.
79 -The \fIfilter\-expression\fR syntax is as described for tcpdump(1),
80 +The \fIfilter\-expression\fR syntax is as described for tcpdump(8),
81 except that qualifiers which are inappropriate for a PPP link, such as
82 \fBether\fR and \fBarp\fR, are not permitted. Generally the filter
83 expression should be enclosed in single-quotes to prevent whitespace
84 @@ -243,6 +261,12 @@ Alternatively, a value of 0 for \fInr\fR
85 compression in the corresponding direction. Use \fInobsdcomp\fR or
86 \fIbsdcomp 0\fR to disable BSD-Compress compression entirely.
88 +.B callback \fIphone_number
89 +Request a call-back to the \fIphone-number\fR. This only works if the peer
90 +is speaking the Call Back Configuration Protocol. Don't put this into the
91 +main options file if you sometimes connect to servers that don't support
95 Use a non-standard hardware flow control (i.e. DTR/CTS) to control
96 the flow of data on the serial port. If neither the \fIcrtscts\fR,
97 @@ -324,9 +348,9 @@ When this is completed, pppd will commen
98 (i.e., IP packets) across the link.
100 The \fIdemand\fR option implies the \fIpersist\fR option. If this
101 -behaviour is not desired, use the \fInopersist\fR option after the
102 +behavior is not desired, use the \fInopersist\fR option after the
103 \fIdemand\fR option. The \fIidle\fR and \fIholdoff\fR
104 -options are also useful in conjuction with the \fIdemand\fR option.
105 +options are also useful in conjunction with the \fIdemand\fR option.
108 Append the domain name \fId\fR to the local host name for authentication
109 @@ -350,9 +374,9 @@ With the \fBdump\fR option, pppd will pr
110 which have been set. This option is like the \fBdryrun\fR option
111 except that pppd proceeds as normal rather than exiting.
113 -.B endpoint \fI<epdisc>
114 +.B endpoint \fI\*[Lt]epdisc\*[Gt]
115 Sets the endpoint discriminator sent by the local machine to the peer
116 -during multilink negotiation to \fI<epdisc>\fR. The default is to use
117 +during multilink negotiation to \fI\*[Lt]epdisc\*[Gt]\fR. The default is to use
118 the MAC address of the first ethernet interface on the system, if any,
119 otherwise the IPv4 address corresponding to the hostname, if any,
120 provided it is not in the multicast or locally-assigned IP address
121 @@ -403,8 +427,8 @@ Specifies that pppd should disconnect if
122 seconds. The link is idle when no data packets (i.e. IP packets) are
123 being sent or received. Note: it is not advisable to use this option
124 with the \fIpersist\fR option without the \fIdemand\fR option.
125 -If the \fBactive\-filter\fR
126 -option is given, data packets which are rejected by the specified
127 +If the \fBactive\-filter-in\fR and/or \fBactive-filter-out\fR
128 +options are given, data packets which are rejected by the specified
129 activity filter also count as the link being idle.
131 .B ipcp\-accept\-local
132 @@ -436,6 +460,23 @@ Provides an extra parameter to the ip\-u
133 option is given, the \fIstring\fR supplied is given as the 6th
134 parameter to those scripts.
137 +Enable IPv6CP negotiation and IPv6 communication.
138 +It needs to be explicitly specified if you want IPv6CP.
141 +Disable IPv6CP negotiation and IPv6 communication.
143 +.B ipv6cp-accept-local
144 +With this option, pppd will accept the peer's idea of our local IPv6
145 +address, even if the local IPv6 address was specified in an option.
147 +.B ipv6cp-use-ipaddr
148 +Use the local IPv4 address as the local interface address.
150 +.B ipv6cp-use-persistent
151 +Use uniquely-available persistent value for link local address (Solaris 2 only).
153 .B ipv6cp\-max\-configure \fIn
154 Set the maximum number of IPv6CP configure-request transmissions to
155 \fIn\fR (default 10).
156 @@ -473,7 +514,7 @@ numbers on the ipx\-network must be uniq
157 default. If this option is not specified then the node numbers are
158 obtained from the peer.
160 -.B ipx\-router\-name \fI<string>
161 +.B ipx\-router\-name \fI\*[Lt]string\*[Gt]
162 Set the name of the router. This is a string and is sent to the peer
165 @@ -512,7 +553,7 @@ Set the maximum number of IPXCP NAK fram
166 send before it rejects the options. The default value is 3.
168 .B ipxcp\-max\-terminate \fIn
169 -Set the maximum nuber of IPXCP terminate request frames before the
170 +Set the maximum number of IPXCP terminate request frames before the
171 local system considers that the peer is not listening to them. The
174 @@ -526,7 +567,7 @@ bits: 1 to
175 enable general debug messages, 2 to request that the contents of
176 received packets be printed, and 4 to request that the contents of
177 transmitted packets be printed. On most systems, messages printed by
178 -the kernel are logged by syslog(1) to a file as directed in the
179 +the kernel are logged by syslogd(8) to a file as directed in the
180 /etc/syslog.conf configuration file.
183 @@ -615,7 +656,7 @@ option, pppd will wait for the CD (Carri
184 modem to be asserted when opening the serial device (unless a connect
185 script is specified), and it will drop the DTR (Data Terminal Ready)
186 signal briefly when the connection is terminated and before executing
187 -the connect script. On Ultrix, this option implies hardware flow
188 +the connect script. On ULTRIX, this option implies hardware flow
189 control, as for the \fIcrtscts\fR option.
192 @@ -639,7 +680,7 @@ analogous to the MRU for the individual
193 currently only available under Linux, and only has any effect if
194 multilink is enabled (see the multilink option).
196 -.B ms\-dns \fI<addr>
197 +.B ms\-dns \fI\*[Lt]addr\*[Gt]
198 If pppd is acting as a server for Microsoft Windows clients, this
199 option allows pppd to supply one or two DNS (Domain Name Server)
200 addresses to the clients. The first instance of this option specifies
201 @@ -647,7 +688,7 @@ the primary DNS address; the second inst
202 secondary DNS address. (This option was present in some older
203 versions of pppd under the name \fBdns\-addr\fR.)
205 -.B ms\-wins \fI<addr>
206 +.B ms\-wins \fI\*[Lt]addr\*[Gt]
207 If pppd is acting as a server for Microsoft Windows or "Samba"
208 clients, this option allows pppd to supply one or two WINS (Windows
209 Internet Name Services) server addresses to the clients. The first
210 @@ -724,12 +765,11 @@ only be required if the peer is buggy an
211 from pppd for IPCP negotiation.
214 -Disable IPv6CP negotiation and IPv6 communication. This option should
215 -only be required if the peer is buggy and gets confused by requests
216 -from pppd for IPv6CP negotiation.
221 -Disables the default behaviour when no local IP address is specified,
222 +Disables the default behavior when no local IP address is specified,
223 which is to determine (if possible) the local IP address from the
224 hostname. With this option, the peer will have to supply the local IP
225 address during IPCP negotiation (unless it specified explicitly on the
226 @@ -837,22 +877,25 @@ seconds (default 3).
227 Set the maximum time that pppd will wait for the peer to authenticate
228 itself with PAP to \fIn\fR seconds (0 means no limit).
230 -.B pass\-filter \fIfilter\-expression
231 -Specifies a packet filter to applied to data packets being sent or
232 -received to determine which packets should be allowed to pass.
233 -Packets which are rejected by the filter are silently discarded. This
234 -option can be used to prevent specific network daemons (such as
235 -routed) using up link bandwidth, or to provide a very basic firewall
236 +.B pass-filter-in \fIfilter-expression
238 +.B pass-filter-out \fIfilter-expression
239 +Specifies an incoming and outgoing packet filter to applied to data
240 +packets being sent or received to determine which packets should be
241 +allowed to pass. Packets which are rejected by the filter are silently
242 +discarded. This option can be used to prevent specific network daemons
243 +(such as routed) using up link bandwidth, or to provide a basic firewall
245 -The \fIfilter\-expression\fR syntax is as described for tcpdump(1),
246 +The \fIfilter-expression\fR syntax is as described for tcpdump(8),
247 except that qualifiers which are inappropriate for a PPP link, such as
248 \fBether\fR and \fBarp\fR, are not permitted. Generally the filter
249 expression should be enclosed in single-quotes to prevent whitespace
250 in the expression from being interpreted by the shell. Note that it
251 is possible to apply different constraints to incoming and outgoing
252 packets using the \fBinbound\fR and \fBoutbound\fR qualifiers. This
253 -option is currently only available under Linux, and requires that the
254 -kernel was configured to include PPP filtering support (CONFIG_PPP_FILTER).
255 +option is currently only available under Linux and NetBSD, and requires
256 +that the kernel was configured to include PPP filtering support
257 +(CONFIG_PPP_FILTER in Linux, PPP_FILTER in NetBSD).
259 .B password \fIpassword\-string
260 Specifies the password to use for authenticating to the peer. Use
261 @@ -897,7 +940,7 @@ pseudo-tty master/slave pair and use the
262 device. The \fIscript\fR will be run in a child process with the
263 pseudo-tty master as its standard input and output. An explicit
264 device name may not be given if this option is used. (Note: if the
265 -\fIrecord\fR option is used in conjuction with the \fIpty\fR option,
266 +\fIrecord\fR option is used in conjunction with the \fIpty\fR option,
267 the child process will have pipes on its standard input and output.)
270 @@ -1085,7 +1128,7 @@ those which permit potentially insecure
271 are only accepted in files which are under the control of the system
272 administrator, or if pppd is being run by root.
274 -The default behaviour of pppd is to allow an unauthenticated peer to
275 +The default behavior of pppd is to allow an unauthenticated peer to
276 use a given IP address only if the system does not already have a
277 route to that IP address. For example, a system with a
278 permanent connection to the wider internet will normally have a
279 @@ -1148,7 +1191,7 @@ independent authentication exchanges wil
280 could use different authentication protocols, and in principle,
281 different names could be used in the two exchanges.
283 -The default behaviour of pppd is to agree to authenticate if
284 +The default behavior of pppd is to agree to authenticate if
285 requested, and to not require authentication from the peer. However,
286 pppd will not agree to authenticate itself with a particular protocol
287 if it has no secrets which could be used to do so.
288 @@ -1289,7 +1332,7 @@ been able to negotiate the same addresse
289 the interface (for example when the peer is an ISP that uses dynamic
290 IP address assignment), pppd has to change the interface IP addresses
291 to the negotiated addresses. This may disrupt existing connections,
292 -and the use of demand dialling with peers that do dynamic IP address
293 +and the use of demand dialing with peers that do dynamic IP address
294 assignment is not recommended.
296 Multilink PPP provides the capability to combine two or more PPP links
297 @@ -1356,7 +1399,7 @@ connect '/usr/sbin/chat \-v \-f /etc/ppp
300 In this example, we are using chat to dial the ISP's modem and go
301 -through any logon sequence required. The /etc/ppp/chat\-isp file
302 +through any log on sequence required. The /etc/ppp/chat\-isp file
303 contains the script used by chat; it could for example contain
306 @@ -1374,7 +1417,7 @@ ABORT "Username/Password Incorrect"
311 +OK "at\*[Am]d0\*[Am]c1"
315 @@ -1617,7 +1660,7 @@ invoked in the same manner and with the
319 -Like /etc/ppp/ip\-up, except that it is executed when the link is available
320 +Like /etc/ppp/ip\-up, except that it is executed when the link is available
321 for sending and receiving IPv6 packets. It is executed with the parameters
323 \fIinterface\-name tty\-device speed local\-link\-local\-address
324 @@ -1625,7 +1668,7 @@ remote\-link\-local\-address ipparam\fR
326 .B /etc/ppp/ipv6\-down
327 Similar to /etc/ppp/ip\-down, but it is executed when IPv6 packets can no
328 -longer be transmitted on the link. It is executed with the same parameters
329 +longer be transmitted on the link. It is executed with the same parameters
330 as the ipv6\-up script.
333 @@ -1635,7 +1678,7 @@ executed with the parameters
335 \fIinterface\-name tty\-device speed network\-number local\-IPX\-node\-address
336 remote\-IPX\-node\-address local\-IPX\-routing\-protocol remote\-IPX\-routing\-protocol
337 -local\-IPX\-router\-name remote\-IPX\-router\-name ipparam pppd\-pid\fR
338 +local\-IPX\-router\-name remote\-IPX\-router\-name ipparam pppd\-pid\fR
340 The local\-IPX\-routing\-protocol and remote\-IPX\-routing\-protocol field
341 may be one of the following:
342 @@ -1786,7 +1829,6 @@ This signal causes pppd to renegotiate c
343 useful to re-enable compression after it has been disabled as a result
344 of a fatal decompression error. (Fatal decompression errors generally
345 indicate a bug in one or other implementation.)
348 Paul Mackerras (paulus@samba.org), based on earlier work by