diff options
author | Jason McIntyre <jmc@cvs.openbsd.org> | 2005-06-05 13:46:31 +0000 |
---|---|---|
committer | Jason McIntyre <jmc@cvs.openbsd.org> | 2005-06-05 13:46:31 +0000 |
commit | 13fdc7596b96fdc9f809310ebaa26404a2998d11 (patch) | |
tree | c19e5de579fdb2445c405d68f97390c42b22ebd7 /share/man/man5 | |
parent | 36ed4d5f6dbdc5df1ebd45e4a0afa1fa45dcd582 (diff) |
(lightly) document carp(4) in reference to state table;
suggested by alexey e. suslikov;
better wording + ok joel@
Diffstat (limited to 'share/man/man5')
-rw-r--r-- | share/man/man5/pf.conf.5 | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index a3e636fa667..ffa6cc85e41 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.333 2005/06/03 22:14:37 jmc Exp $ +.\" $OpenBSD: pf.conf.5,v 1.334 2005/06/05 13:46:30 jmc Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -1858,6 +1858,15 @@ Using a modifier on .Ar modulate state rules between fast networks is suggested to prevent ACK storms. +.Pp +Note that alternative methods are available +to prevent loss of the state table +and allow for firewall failover. +See +.Xr carp 4 +and +.Xr pfsync 4 +for further information. .Sh SYN PROXY By default, .Xr pf 4 @@ -2803,6 +2812,7 @@ Service name database. Example rulesets. .El .Sh SEE ALSO +.Xr carp 4 , .Xr icmp 4 , .Xr icmp6 4 , .Xr ip 4 , |