diff options
author | Henning Brauer <henning@cvs.openbsd.org> | 2011-07-04 03:36:15 +0000 |
---|---|---|
committer | Henning Brauer <henning@cvs.openbsd.org> | 2011-07-04 03:36:15 +0000 |
commit | b9f6604717f5585b998237983a67dab066e8a448 (patch) | |
tree | eb1eaaa894e14f60c54d365341c14280f6a93dc3 /share/man/man5/pf.conf.5 | |
parent | 9161482435f992bb186f4b3bc1bd049f169ffc8f (diff) |
bye bye require-order.
i added that button many many many years ago since the order (options, scrub,
nat, filter) was enforced back then, which I hated. now we had that turned
off for ages, and with the scrub and nat rulesets being gone, there is very
little reason to enforce an order at all. so let's get rid of it.
introducing this button was one of my very early commits to openbsd... feels
a bit strange to remove it now :)
ok ryan dlg theo
Diffstat (limited to 'share/man/man5/pf.conf.5')
-rw-r--r-- | share/man/man5/pf.conf.5 | 16 |
1 files changed, 2 insertions, 14 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 2bbccb81154..697a69d6754 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.496 2011/07/03 23:37:55 zinke Exp $ +.\" $OpenBSD: pf.conf.5,v 1.497 2011/07/04 03:36:14 henning Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -27,7 +27,7 @@ .\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE .\" POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: July 3 2011 $ +.Dd $Mdocdate: July 4 2011 $ .Dt PF.CONF 5 .Os .Sh NAME @@ -1142,17 +1142,6 @@ instead of being dropped; the reassembled packet will have the .Ar dont-fragment bit cleared. -.It Ar set require-order -If set to -.Ar yes , -.Xr pfctl 8 -will enforce that statement types in the ruleset are listed in the -following order, to match the operation of the underlying packet -filtering engine: -.Em options , -.Em queueing , -.Em filtering . -This option is disabled by default. .It Ar set ruleset-optimization .Bl -tag -width xxxxxxxx -compact .It Ar basic @@ -2666,7 +2655,6 @@ option = "set" ( [ "timeout" ( timeout | "{" timeout-list "}" ) ] | [ "block-policy" ( "drop" | "return" ) ] | [ "state-policy" ( "if-bound" | "floating" ) ] [ "state-defaults" state-opts ] - [ "require-order" ( "yes" | "no" ) ] [ "fingerprints" filename ] | [ "skip on" ifspec ] | [ "debug" ( "none" | "urgent" | "misc" | "loud" ) ] | |