summaryrefslogtreecommitdiff
path: root/share/man/man5/pf.conf.5
diff options
context:
space:
mode:
Diffstat (limited to 'share/man/man5/pf.conf.5')
-rw-r--r--share/man/man5/pf.conf.514
1 files changed, 13 insertions, 1 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index f0fb606f1c1..7841b2c8898 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pf.conf.5,v 1.255 2003/06/10 16:59:49 deraadt Exp $
+.\" $OpenBSD: pf.conf.5,v 1.256 2003/06/11 17:03:09 pb Exp $
.\"
.\" Copyright (c) 2002, Daniel Hartmeier
.\" All rights reserved.
@@ -1030,6 +1030,11 @@ This causes a TCP RST to be returned for
.Xr tcp 4
packets and an ICMP UNREACHABLE for UDP and other packets.
.El
+.Pp
+Options returning packets have no effect if
+.Xr pf 4
+operates on a
+.Xr bridge 4 .
.It Ar pass
The packet is passed.
.El
@@ -1670,6 +1675,13 @@ includes
and
.Ar keep state .
.Pp
+Rules with
+.Ar synproxy
+will not work if
+.Xr pf 4
+operates on a
+.Xr bridge 4 .
+.Pp
Example:
.Bd -literal -offset indent
pass in proto tcp from any to any port www flags S/SA synproxy state