summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorHenning Brauer <henning@cvs.openbsd.org>2002-09-12 12:17:06 +0000
committerHenning Brauer <henning@cvs.openbsd.org>2002-09-12 12:17:06 +0000
commitd057b2cde18b200bd8603aef39c8c61c293f3d74 (patch)
treed3ffa6f7cc1b1234ba38c8fa39913d6e73f46530
parentde5b2b95dcbd0d6957e88996fbbe785600a3d43e (diff)
BNF for antispoof
-rw-r--r--share/man/man5/pf.conf.59
1 files changed, 7 insertions, 2 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index 6183a07ca37..d2cbe73e105 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pf.conf.5,v 1.80 2002/09/12 12:14:35 henning Exp $
+.\" $OpenBSD: pf.conf.5,v 1.81 2002/09/12 12:17:05 henning Exp $
.\"
.\" Copyright (c) 2002, Daniel Hartmeier
.\" All rights reserved.
@@ -923,7 +923,8 @@ Syntax for
.Em pf.conf
in BNF:
.Bd -literal
-line = ( option | pf_rule | nat_rule | binat_rule | rdr_rule )
+line = ( option | pf_rule | nat_rule | binat_rule | rdr_rule |
+ antispoof_rule )
option = set ( [ "timeout" ( timeout | "{" timeout-list "}" ) ] |
[ "optimization" [ "default" | "normal" |
@@ -954,6 +955,10 @@ rdr_rule = [ "no" ] "rdr" "on" ifspec [ af ] [ protospec ]
"from" ipspec "to" ipspec [ portspec ]
[ "->" address [ portspec ] ] .
+antispoof_rule = "antispoof" [ "log" ] [ "quick" ]
+ "for" ( interface-name | "{" interface-list "}" )
+ [ af ] .
+
action = "pass" | "block" [ return ] | "scrub" .
return = "return-rst" [ "(" "ttl" number ")" ] |
"return-icmp"