diff options
| author | Daniel Hartmeier <dhartmei@cvs.openbsd.org> | 2002-02-23 01:22:55 +0000 |
|---|---|---|
| committer | Daniel Hartmeier <dhartmei@cvs.openbsd.org> | 2002-02-23 01:22:55 +0000 |
| commit | f65be4bfb39e150d7a00b2e0d5d1569c00c75269 (patch) | |
| tree | 371e27ed3ce2c206e9b1146cfa21058e27264abd | |
| parent | 7394ac8821df07c7c1bf41414b56db2d69fe1eb3 (diff) | |
Mention that normalization happens before filtering, and that the position
of scrub rules (in relation to pass/block rules) is not relevant.
| -rw-r--r-- | share/man/man5/pf.conf.5 | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index fd0a34a187d..a9af66c499c 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.32 2002/02/19 12:18:24 dhartmei Exp $ +.\" $OpenBSD: pf.conf.5,v 1.33 2002/02/23 01:22:54 dhartmei Exp $ .\" .\" Copyright (c) 2001, Daniel Hartmeier .\" All rights reserved. @@ -460,6 +460,11 @@ Clears the bit from a matching ip packet. .Ss min-ttl <number> Enforces a minimum ttl for matching ip packets. +.Pp +Normalization occurs before filtering, scrub rules and pass/block +rules are evaluated independantly. +Hence, their relative position in the rule set is not relevant, +and packets can't be blocked before normalization. .Sh EXAMPLES .Bd -literal # The external interface is kue0 (157.161.48.183, the only routable address) |