diff options
author | Henning Brauer <henning@cvs.openbsd.org> | 2002-09-12 12:17:06 +0000 |
---|---|---|
committer | Henning Brauer <henning@cvs.openbsd.org> | 2002-09-12 12:17:06 +0000 |
commit | d057b2cde18b200bd8603aef39c8c61c293f3d74 (patch) | |
tree | d3ffa6f7cc1b1234ba38c8fa39913d6e73f46530 | |
parent | de5b2b95dcbd0d6957e88996fbbe785600a3d43e (diff) |
BNF for antispoof
-rw-r--r-- | share/man/man5/pf.conf.5 | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 6183a07ca37..d2cbe73e105 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.80 2002/09/12 12:14:35 henning Exp $ +.\" $OpenBSD: pf.conf.5,v 1.81 2002/09/12 12:17:05 henning Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -923,7 +923,8 @@ Syntax for .Em pf.conf in BNF: .Bd -literal -line = ( option | pf_rule | nat_rule | binat_rule | rdr_rule ) +line = ( option | pf_rule | nat_rule | binat_rule | rdr_rule | + antispoof_rule ) option = set ( [ "timeout" ( timeout | "{" timeout-list "}" ) ] | [ "optimization" [ "default" | "normal" | @@ -954,6 +955,10 @@ rdr_rule = [ "no" ] "rdr" "on" ifspec [ af ] [ protospec ] "from" ipspec "to" ipspec [ portspec ] [ "->" address [ portspec ] ] . +antispoof_rule = "antispoof" [ "log" ] [ "quick" ] + "for" ( interface-name | "{" interface-list "}" ) + [ af ] . + action = "pass" | "block" [ return ] | "scrub" . return = "return-rst" [ "(" "ttl" number ")" ] | "return-icmp" |