skipif(1M)

NAME
skipif - configure the use of SKIP on network interfaces.

SYNOPSIS
/usr/sbin/skipif
[ -i <ifname|all> ] -a
[ -i <ifname|all> ] -d
[ -i <ifname|all> ] -s
-l [ -v ]
-h

DESCRIPTION
skipif is used to add SKIP to or delete SKIP from network interfaces. skipif is also used to save SKIP's access control list for a given network interface, making it permanent across system reboots. In addition, skipif can be used to list network interfaces present in the system and optionally print the current access control configuration for each.

OPTIONS

-i interface
    The -i option is used to specify the name of the interface for which the command is applicable. If this option is not specified skipif operates on the system's primary network interface. If the interface name "all" is used, the command will be applied to all the network interfaces present in the system. The loopback interface "lo0" is excluded.

-a  This option is used to add SKIP to a network interface. The access control list is initialized as empty with SKIP present on the interface but disabled (off).

-s  This option is used to make the current access control list permanent across system reboots. This option must be used with care as an incorrect or incomplete access control list can stop the system from functioning correctly.

-d  Deletes SKIP from a network interface. The network interface is returned to normal non protected operation.

-l  This option lists all the network interfaces present in the system. If the interface has SKIP added it will be tagged "[skip]". If the access control list for the interface has been modified but not saved, the interface will be tagged with "[ACL not saved]". Using the "-v" option will cause skipif to also print the access control list for each interface along with its status.

-h  This option displays the skipif usage message.

USAGE

You must be root to run this command.

EXAMPLES

To add SKIP on the network interface "le0", the following command is used:

    # skipif -i le0 -a

To add SKIP to all the network interfaces on the system, the following command is used:

    # skipif -i all -a

To save the SKIP ACL of all the network interfaces of the system, and have SKIP started automatically at boot time, the following command is used:

    # skipif -i all -s

NOTES
The SKIP access control list for each network interface is stored as a text file in the location described below. If an incorrect or incomplete access control list prevents the system from operating, it may be necessary to manually modify or remove the appropriate file. Some non LAN interfaces (PPP for example), will not be configured at boot time even if an access control list exists for these interfaces. It is the responsability of the interface configuration procedure to use the SKIP configuration file for this interface. If a system reboot is necessary to bring the changes into effect skipif will advise so.

FILES

/etc/skip/acl.<interface>

SEE ALSO
skiphost(1M), skipstat(1M), skiptool(1M), ifconfig(1M)