diff options
-rw-r--r-- | share/man/man5/pf.conf.5 | 29 |
1 files changed, 27 insertions, 2 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 09a2813bddd..191e254bc1b 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.499 2011/07/04 05:59:38 tedu Exp $ +.\" $OpenBSD: pf.conf.5,v 1.500 2011/07/08 22:20:56 mcbride Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -27,7 +27,7 @@ .\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE .\" POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: July 4 2011 $ +.Dd $Mdocdate: July 8 2011 $ .Dt PF.CONF 5 .Os .Sh NAME @@ -608,6 +608,30 @@ For example, the following rule will drop 20% of incoming ICMP packets: .Pp .Dl block in proto icmp probability 20% .Pp +.It Xo Ar prio Aq Ar priority +.No \*(Ba ( Aq Ar priority , +.Aq Ar priority ) +.Xc +Packets matching this rule will be assigned a specific queueing priority. +Priorities are assigned as integers 0 through 7, +with a default priority of 3. +If two priorities are given, packets which have a TOS of +.Ar lowdelay +and TCP ACKs with no data payload will be assigned to the second one. +.Pp +For example: +.Bd -literal -offset indent +pass in proto tcp to port 25 prio 2 +pass in proto tcp to port 22 prio (2, 5) +.Ed +.Pp +The interface priority queues accessed by the +.Ar prio +keyword are always enabled and do not require any additional +configuration, unlike the queues described below and in the +.Sx QUEUEING +section. +.Pp .It Xo Ar queue Aq Ar queue .No \*(Ba ( Aq Ar queue , .Aq Ar queue ) @@ -2673,6 +2697,7 @@ filteropt = user | group | flags | icmp-type | icmp6-type | "divert-packet" "port" port | "divert-reply" | "divert-to" host "port" port | "label" string | "tag" string | [ ! ] "tagged" string | + "prio" ( number | "(" number [ [ "," ] number ] ")" ) | "queue" ( string | "(" string [ [ "," ] string ] ")" ) | "rtable" number | "probability" number"%" | "binat-to" ( redirhost | "{" redirhost-list "}" ) |