diff options
| author | Cedric Berger <cedric@cvs.openbsd.org> | 2004-04-24 23:22:55 +0000 |
|---|---|---|
| committer | Cedric Berger <cedric@cvs.openbsd.org> | 2004-04-24 23:22:55 +0000 |
| commit | 00841eaf02d570340c21f200a8f8cb6326c38e6c (patch) | |
| tree | e0b250c03c35e8e3eaad2ced14659841e59a490e /share/man/man5/pf.conf.5 | |
| parent | 42090a4d22f5c1213635160510f17b68ce84eb73 (diff) | |
Add "probability xxx" rule modifier. ok deraadt@
Diffstat (limited to 'share/man/man5/pf.conf.5')
| -rw-r--r-- | share/man/man5/pf.conf.5 | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 80a0bc0b570..22371b24b23 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.294 2004/04/04 19:40:43 jmc Exp $ +.\" $OpenBSD: pf.conf.5,v 1.295 2004/04/24 23:22:54 cedric Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -1508,6 +1508,15 @@ by specifying the operator before the .Ar tagged keyword. +.It Ar probability <number> +A probability attribute can be attached to a rule, with a value set between +0 and 1, bounds not included. +In that case, the rule will be honoured using the given probability value +only. +For example, the following rule will drop 20% of incoming ICMP packets: +.Bd -literal -offset indent +block in proto icmp probability 20% +.Ed .El .Sh ROUTING If a packet matches a rule with a route option set, the packet filter will |