summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--share/man/man5/pf.conf.529
1 files changed, 27 insertions, 2 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index 09a2813bddd..191e254bc1b 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pf.conf.5,v 1.499 2011/07/04 05:59:38 tedu Exp $
+.\" $OpenBSD: pf.conf.5,v 1.500 2011/07/08 22:20:56 mcbride Exp $
.\"
.\" Copyright (c) 2002, Daniel Hartmeier
.\" All rights reserved.
@@ -27,7 +27,7 @@
.\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
.\" POSSIBILITY OF SUCH DAMAGE.
.\"
-.Dd $Mdocdate: July 4 2011 $
+.Dd $Mdocdate: July 8 2011 $
.Dt PF.CONF 5
.Os
.Sh NAME
@@ -608,6 +608,30 @@ For example, the following rule will drop 20% of incoming ICMP packets:
.Pp
.Dl block in proto icmp probability 20%
.Pp
+.It Xo Ar prio Aq Ar priority
+.No \*(Ba ( Aq Ar priority ,
+.Aq Ar priority )
+.Xc
+Packets matching this rule will be assigned a specific queueing priority.
+Priorities are assigned as integers 0 through 7,
+with a default priority of 3.
+If two priorities are given, packets which have a TOS of
+.Ar lowdelay
+and TCP ACKs with no data payload will be assigned to the second one.
+.Pp
+For example:
+.Bd -literal -offset indent
+pass in proto tcp to port 25 prio 2
+pass in proto tcp to port 22 prio (2, 5)
+.Ed
+.Pp
+The interface priority queues accessed by the
+.Ar prio
+keyword are always enabled and do not require any additional
+configuration, unlike the queues described below and in the
+.Sx QUEUEING
+section.
+.Pp
.It Xo Ar queue Aq Ar queue
.No \*(Ba ( Aq Ar queue ,
.Aq Ar queue )
@@ -2673,6 +2697,7 @@ filteropt = user | group | flags | icmp-type | icmp6-type |
"divert-packet" "port" port | "divert-reply" |
"divert-to" host "port" port |
"label" string | "tag" string | [ ! ] "tagged" string |
+ "prio" ( number | "(" number [ [ "," ] number ] ")" ) |
"queue" ( string | "(" string [ [ "," ] string ] ")" ) |
"rtable" number | "probability" number"%" |
"binat-to" ( redirhost | "{" redirhost-list "}" )