diff options
author | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2002-12-28 22:15:48 +0000 |
---|---|---|
committer | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2002-12-28 22:15:48 +0000 |
commit | 8c9e7ccf1f94a52fae91d554d87684d5ff7ef312 (patch) | |
tree | 8375725e2ca95ae8c0393943b38eb228166487ee /share/man | |
parent | 2480a63761c8f227c4ad8758b24640228abca3c9 (diff) |
More direct explanation of where the port number and protocol number to name
mappings come from.
ok dhartmei@ henning@
Diffstat (limited to 'share/man')
-rw-r--r-- | share/man/man5/pf.conf.5 | 20 |
1 files changed, 16 insertions, 4 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index a07eea96eb5..b49407bfc5c 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.159 2002/12/24 21:28:46 mcbride Exp $ +.\" $OpenBSD: pf.conf.5,v 1.160 2002/12/28 22:15:47 mcbride Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -711,8 +711,12 @@ Common protocols are .Xr tcp 4 , .Xr udp 4 , .Xr icmp 4 , -and +and .Xr icmp6 4 . +For a list of all protocol name to number mappings used by +.Xr pfctl 8 , +see the file +.Em /etc/protocols . .It Pa from <source> port <source> to <dest> port <dest> The rule applies only to packets with the specified source and destination addresses and ports. @@ -739,7 +743,15 @@ The ruleset does not need to be reloaded. This is especially useful with .Pa nat . .Pp -Ports and ranges of ports can be specified using these operators: +Ports can be specified either by number or by name. +For example, port 80 can be specified as +.Pa www . +For a list of all port name to number mappings used by +.Xr pfctl 8 , +see the file +.Em /etc/services . +.Pp +Ports and ranges of ports are specified by using these operators: .Bd -literal = (equal), != (unequal), < (lesser), <= (lesser or equal), > (greater), >= (greater or equal), @@ -766,7 +778,7 @@ The host and port specifications are optional, as in the following examples: pass in proto tcp from any port <= 1024 to any pass in proto tcp from any to any port 25 pass in proto tcp from 10.0.0.0/8 port > 1024 to \\ - ! 10.1.2.3 port != 22 + ! 10.1.2.3 port != ssh .Ed .It Pa all This is a short form for "from any to any". |