summaryrefslogtreecommitdiff
path: root/share/man/man5
diff options
context:
space:
mode:
authorJason McIntyre <jmc@cvs.openbsd.org>2007-11-09 15:54:54 +0000
committerJason McIntyre <jmc@cvs.openbsd.org>2007-11-09 15:54:54 +0000
commit8d43794167dff8fbe3fd3533c81f952cde83ccbf (patch)
tree5172c4e9fbc25044b1b6694be3dedee860066eb4 /share/man/man5
parent3a0f6f9ed7570a0f895ca7757810667ef6cc3d5f (diff)
when "max <number>" is exceeded, packets are not dropped - rather they
fail to match; from Doichin Dokov diff from henning and myself
Diffstat (limited to 'share/man/man5')
-rw-r--r--share/man/man5/pf.conf.58
1 files changed, 4 insertions, 4 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index c6ca3db839d..15d4ab31825 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pf.conf.5,v 1.388 2007/10/14 16:01:43 deraadt Exp $
+.\" $OpenBSD: pf.conf.5,v 1.389 2007/11/09 15:54:53 jmc Exp $
.\"
.\" Copyright (c) 2002, Daniel Hartmeier
.\" All rights reserved.
@@ -27,7 +27,7 @@
.\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
.\" POSSIBILITY OF SUCH DAMAGE.
.\"
-.Dd $Mdocdate: October 14 2007 $
+.Dd $Mdocdate: November 9 2007 $
.Dt PF.CONF 5
.Os
.Sh NAME
@@ -2043,8 +2043,8 @@ must be specified explicitly to apply options to a rule.
.Bl -tag -width xxxx -compact
.It Ar max Aq Ar number
Limits the number of concurrent states the rule may create.
-When this limit is reached, further packets matching the rule that would
-create state are dropped, until existing states time out.
+When this limit is reached, further packets that would create
+state will not match this rule until existing states time out.
.It Ar no-sync
Prevent state changes for states created by this rule from appearing on the
.Xr pfsync 4