try to document received-on.

1 files changed, 12 insertions, 3 deletions

diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index a033352c745..fbd95ad8aa1 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1,4 +1,4 @@
-.\"	$OpenBSD: pf.conf.5,v 1.465 2009/11/30 18:51:57 sthen Exp $
+.\"	$OpenBSD: pf.conf.5,v 1.466 2009/12/24 07:14:46 dlg Exp $
 .\"
 .\" Copyright (c) 2002, Daniel Hartmeier
 .\" All rights reserved.
@@ -27,7 +27,7 @@
 .\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 .\" POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: November 30 2009 $
+.Dd $Mdocdate: December 24 2009 $
 .Dt PF.CONF 5
 .Os
 .Sh NAME
@@ -619,6 +619,14 @@ pass in proto tcp to port 25 queue mail
 pass in proto tcp to port 22 queue(ssh_bulk, ssh_prio)
 .Ed
 .Pp
+.It Ar received-on Aq Ar interface
+When packets are received by the system, the interface they enter
+the system through is stored in the packet.
+The
+.Ar received-on
+options allows you to filter packets based on the interface or
+interface group they were received on.
+.Pp
 .It Ar rtable Aq Ar number
 Used to select an alternate routing table for the routing lookup.
 Only effective before the route lookup happened, i.e. when filtering inbound.
@@ -2638,7 +2646,8 @@ filteropt      = user | group | flags | icmp-type | icmp6-type |
 		 [ portspec ] [ pooltype ] |
 		 "nat-to" ( redirhost | "{" redirhost-list "}" )
 		 [ portspec ] [ pooltype ] [ "static-port" ] |
-		 [ "fastroute" | route ]
+		 [ "fastroute" | route ] |
+		 [ "received-on" ( interface-name | interface-group ) ]
 
 scrubopts      = scrubopt [ [ "," ] scrubopts ]
 scrubopt       = "no-df" | "min-ttl" number | "max-mss" number |