diff options
Diffstat (limited to 'share/man/man5/pf.conf.5')
| -rw-r--r-- | share/man/man5/pf.conf.5 | 15 |
1 files changed, 12 insertions, 3 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index a033352c745..fbd95ad8aa1 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.465 2009/11/30 18:51:57 sthen Exp $ +.\" $OpenBSD: pf.conf.5,v 1.466 2009/12/24 07:14:46 dlg Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -27,7 +27,7 @@ .\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE .\" POSSIBILITY OF SUCH DAMAGE. .\" -.Dd $Mdocdate: November 30 2009 $ +.Dd $Mdocdate: December 24 2009 $ .Dt PF.CONF 5 .Os .Sh NAME @@ -619,6 +619,14 @@ pass in proto tcp to port 25 queue mail pass in proto tcp to port 22 queue(ssh_bulk, ssh_prio) .Ed .Pp +.It Ar received-on Aq Ar interface +When packets are received by the system, the interface they enter +the system through is stored in the packet. +The +.Ar received-on +options allows you to filter packets based on the interface or +interface group they were received on. +.Pp .It Ar rtable Aq Ar number Used to select an alternate routing table for the routing lookup. Only effective before the route lookup happened, i.e. when filtering inbound. @@ -2638,7 +2646,8 @@ filteropt = user | group | flags | icmp-type | icmp6-type | [ portspec ] [ pooltype ] | "nat-to" ( redirhost | "{" redirhost-list "}" ) [ portspec ] [ pooltype ] [ "static-port" ] | - [ "fastroute" | route ] + [ "fastroute" | route ] | + [ "received-on" ( interface-name | interface-group ) ] scrubopts = scrubopt [ [ "," ] scrubopts ] scrubopt = "no-df" | "min-ttl" number | "max-mss" number | |