summaryrefslogtreecommitdiff
path: root/share/man/man5
diff options
context:
space:
mode:
authorHenning Brauer <henning@cvs.openbsd.org>2011-07-04 03:36:15 +0000
committerHenning Brauer <henning@cvs.openbsd.org>2011-07-04 03:36:15 +0000
commitb9f6604717f5585b998237983a67dab066e8a448 (patch)
treeeb1eaaa894e14f60c54d365341c14280f6a93dc3 /share/man/man5
parent9161482435f992bb186f4b3bc1bd049f169ffc8f (diff)
bye bye require-order.
i added that button many many many years ago since the order (options, scrub, nat, filter) was enforced back then, which I hated. now we had that turned off for ages, and with the scrub and nat rulesets being gone, there is very little reason to enforce an order at all. so let's get rid of it. introducing this button was one of my very early commits to openbsd... feels a bit strange to remove it now :) ok ryan dlg theo
Diffstat (limited to 'share/man/man5')
-rw-r--r--share/man/man5/pf.conf.516
1 files changed, 2 insertions, 14 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index 2bbccb81154..697a69d6754 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pf.conf.5,v 1.496 2011/07/03 23:37:55 zinke Exp $
+.\" $OpenBSD: pf.conf.5,v 1.497 2011/07/04 03:36:14 henning Exp $
.\"
.\" Copyright (c) 2002, Daniel Hartmeier
.\" All rights reserved.
@@ -27,7 +27,7 @@
.\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
.\" POSSIBILITY OF SUCH DAMAGE.
.\"
-.Dd $Mdocdate: July 3 2011 $
+.Dd $Mdocdate: July 4 2011 $
.Dt PF.CONF 5
.Os
.Sh NAME
@@ -1142,17 +1142,6 @@ instead of being dropped;
the reassembled packet will have the
.Ar dont-fragment
bit cleared.
-.It Ar set require-order
-If set to
-.Ar yes ,
-.Xr pfctl 8
-will enforce that statement types in the ruleset are listed in the
-following order, to match the operation of the underlying packet
-filtering engine:
-.Em options ,
-.Em queueing ,
-.Em filtering .
-This option is disabled by default.
.It Ar set ruleset-optimization
.Bl -tag -width xxxxxxxx -compact
.It Ar basic
@@ -2666,7 +2655,6 @@ option = "set" ( [ "timeout" ( timeout | "{" timeout-list "}" ) ] |
[ "block-policy" ( "drop" | "return" ) ] |
[ "state-policy" ( "if-bound" | "floating" ) ]
[ "state-defaults" state-opts ]
- [ "require-order" ( "yes" | "no" ) ]
[ "fingerprints" filename ] |
[ "skip on" ifspec ] |
[ "debug" ( "none" | "urgent" | "misc" | "loud" ) ] |