summaryrefslogtreecommitdiff
path: root/share/man
diff options
context:
space:
mode:
authorRyan Thomas McBride <mcbride@cvs.openbsd.org>2002-12-28 22:15:48 +0000
committerRyan Thomas McBride <mcbride@cvs.openbsd.org>2002-12-28 22:15:48 +0000
commit8c9e7ccf1f94a52fae91d554d87684d5ff7ef312 (patch)
tree8375725e2ca95ae8c0393943b38eb228166487ee /share/man
parent2480a63761c8f227c4ad8758b24640228abca3c9 (diff)
More direct explanation of where the port number and protocol number to name
mappings come from. ok dhartmei@ henning@
Diffstat (limited to 'share/man')
-rw-r--r--share/man/man5/pf.conf.520
1 files changed, 16 insertions, 4 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index a07eea96eb5..b49407bfc5c 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pf.conf.5,v 1.159 2002/12/24 21:28:46 mcbride Exp $
+.\" $OpenBSD: pf.conf.5,v 1.160 2002/12/28 22:15:47 mcbride Exp $
.\"
.\" Copyright (c) 2002, Daniel Hartmeier
.\" All rights reserved.
@@ -711,8 +711,12 @@ Common protocols are
.Xr tcp 4 ,
.Xr udp 4 ,
.Xr icmp 4 ,
-and
+and
.Xr icmp6 4 .
+For a list of all protocol name to number mappings used by
+.Xr pfctl 8 ,
+see the file
+.Em /etc/protocols .
.It Pa from <source> port <source> to <dest> port <dest>
The rule applies only to packets with the specified source and destination
addresses and ports.
@@ -739,7 +743,15 @@ The ruleset does not need to be reloaded. This is especially
useful with
.Pa nat .
.Pp
-Ports and ranges of ports can be specified using these operators:
+Ports can be specified either by number or by name.
+For example, port 80 can be specified as
+.Pa www .
+For a list of all port name to number mappings used by
+.Xr pfctl 8 ,
+see the file
+.Em /etc/services .
+.Pp
+Ports and ranges of ports are specified by using these operators:
.Bd -literal
= (equal), != (unequal), < (lesser), <= (lesser or equal),
> (greater), >= (greater or equal),
@@ -766,7 +778,7 @@ The host and port specifications are optional, as in the following examples:
pass in proto tcp from any port <= 1024 to any
pass in proto tcp from any to any port 25
pass in proto tcp from 10.0.0.0/8 port > 1024 to \\
- ! 10.1.2.3 port != 22
+ ! 10.1.2.3 port != ssh
.Ed
.It Pa all
This is a short form for "from any to any".