diff options
author | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2003-11-07 20:29:55 +0000 |
---|---|---|
committer | Ryan Thomas McBride <mcbride@cvs.openbsd.org> | 2003-11-07 20:29:55 +0000 |
commit | 588f77d9e14a085f1e3abc1cbad86c6fbec87a82 (patch) | |
tree | 0350e6eedeef3a998e5fecd4f9ecf0b21cfa3e59 /share/man | |
parent | f179c3e0669d20dca15e733fda92061aa16ea280 (diff) |
Add some missing mentions of 'synproxy state'
ok jmc@
Diffstat (limited to 'share/man')
-rw-r--r-- | share/man/man5/pf.conf.5 | 22 |
1 files changed, 14 insertions, 8 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index b07308275e5..f963a1a0936 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.276 2003/11/06 14:38:03 henning Exp $ +.\" $OpenBSD: pf.conf.5,v 1.277 2003/11/07 20:29:54 mcbride Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -1092,15 +1092,17 @@ are specified, the rule will match packets in both directions. .It Ar log In addition to the action specified, a log message is generated. All packets for that connection are logged, unless the -.Ar keep state -or +.Ar keep state , .Ar modulate state +or +.Ar synproxy state options are specified, in which case only the packet that establishes the state is logged. (See -.Ar keep state -and +.Ar keep state , .Ar modulate state +and +.Ar synproxy state below). The logged packets are sent to the .Xr pflog 4 @@ -1114,9 +1116,10 @@ in binary format. .It Ar log-all Used with -.Ar keep state -or +.Ar keep state , .Ar modulate state +or +.Ar synproxy state rules to force logging of all packets for a connection. As with .Ar log , @@ -1421,7 +1424,10 @@ A packet is only ever assigned one tag at a time. rules that use the .Ar tag keyword must also use -.Ar keep state . +.Ar keep state , +.Ar modulate state +or +.Ar synproxy state . Packet tagging can be done during .Ar nat , .Ar rdr , |