summaryrefslogtreecommitdiff
path: root/share/man/man5
diff options
context:
space:
mode:
authorJason McIntyre <jmc@cvs.openbsd.org>2005-06-05 13:46:31 +0000
committerJason McIntyre <jmc@cvs.openbsd.org>2005-06-05 13:46:31 +0000
commit13fdc7596b96fdc9f809310ebaa26404a2998d11 (patch)
treec19e5de579fdb2445c405d68f97390c42b22ebd7 /share/man/man5
parent36ed4d5f6dbdc5df1ebd45e4a0afa1fa45dcd582 (diff)
(lightly) document carp(4) in reference to state table;
suggested by alexey e. suslikov; better wording + ok joel@
Diffstat (limited to 'share/man/man5')
-rw-r--r--share/man/man5/pf.conf.512
1 files changed, 11 insertions, 1 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index a3e636fa667..ffa6cc85e41 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pf.conf.5,v 1.333 2005/06/03 22:14:37 jmc Exp $
+.\" $OpenBSD: pf.conf.5,v 1.334 2005/06/05 13:46:30 jmc Exp $
.\"
.\" Copyright (c) 2002, Daniel Hartmeier
.\" All rights reserved.
@@ -1858,6 +1858,15 @@ Using a
modifier on
.Ar modulate state
rules between fast networks is suggested to prevent ACK storms.
+.Pp
+Note that alternative methods are available
+to prevent loss of the state table
+and allow for firewall failover.
+See
+.Xr carp 4
+and
+.Xr pfsync 4
+for further information.
.Sh SYN PROXY
By default,
.Xr pf 4
@@ -2803,6 +2812,7 @@ Service name database.
Example rulesets.
.El
.Sh SEE ALSO
+.Xr carp 4 ,
.Xr icmp 4 ,
.Xr icmp6 4 ,
.Xr ip 4 ,