diff options
| author | David Krause <david@cvs.openbsd.org> | 2003-05-17 05:51:10 +0000 |
|---|---|---|
| committer | David Krause <david@cvs.openbsd.org> | 2003-05-17 05:51:10 +0000 |
| commit | 3df1cd04c783ecc40cffe562619053e8c7012be2 (patch) | |
| tree | 08c5d549978c607f6965b103c0df2dc42d9a9513 /share/man | |
| parent | 75b8d47e3d297b3ce0837510d92cac95340ef3c1 (diff) | |
document tags
ok henning@
Diffstat (limited to 'share/man')
| -rw-r--r-- | share/man/man5/pf.conf.5 | 11 |
1 files changed, 9 insertions, 2 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 906fc56bd65..4432f10595a 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.241 2003/05/16 18:38:47 jmc Exp $ +.\" $OpenBSD: pf.conf.5,v 1.242 2003/05/17 05:51:09 david Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -1358,6 +1358,13 @@ For example: pass in proto tcp to port 25 queue mail pass in proto tcp to port 22 queue(ssh_bulk, ssh_prio) .Ed +.It Ar tag <string> +A tag will be assigned to packets matching this rule. +This tag can be later used to filter packets with that tag, +even on another interface. +.It Ar tagged <string> +This rule applies only to packets that have been tagged with the named +tag. .El .Sh ROUTING If a packet matches a rule with a route option set, the packet filter will @@ -2079,7 +2086,7 @@ filteropt = USER | GROUP | FLAGS | ICMP-TYPE | ICMP6-TYPE | TOS | ( keep | modulate ) state [ '(' STATE-OPTS ')' ] | fragment | no-df | min-ttl NUMBER | max-mss NUMBER | random-id | reassemble tcp | FRAGMENTATION | allow-opts | - label STRING | + label STRING | tag STRING | tagged STRING queue '(' STRING | ( STRING [ [ ',' ] STRING ] ) ')' nat-rule = [ no ] nat [ on IFSPEC ] [ AF ] [ PROTOSPEC ] |