diff options
Diffstat (limited to 'share/man')
-rw-r--r-- | share/man/man5/pf.conf.5 | 15 |
1 files changed, 9 insertions, 6 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 0e3c44ffc41..5bd738e33a1 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.330 2005/05/26 15:29:47 dhartmei Exp $ +.\" $OpenBSD: pf.conf.5,v 1.331 2005/05/27 18:57:56 dhartmei Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -1219,7 +1219,7 @@ logging daemon, which dumps the logged packets to the file in .Xr pcap 3 binary format. -.It Ar log-all +.It Ar log (all) Used with .Ar keep state , .Ar modulate state @@ -2606,10 +2606,13 @@ option = "set" ( [ "timeout" ( timeout | "{" timeout-list "}" ) ] | [ "debug" ( "none" | "urgent" | "misc" | "loud" ) ] ) pf-rule = action [ ( "in" | "out" ) ] - [ "log" | "log-all" ] [ "quick" ] + [ "log" [ "(" logopts ")"] ] [ "quick" ] [ "on" ifspec ] [ route ] [ af ] [ protospec ] hosts [ filteropt-list ] +logopts = logopt [ "," logopts ] +logopt = "all" | "user" + filteropt-list = filteropt-list filteropt | filteropt filteropt = user | group | flags | icmp-type | icmp6-type | tos | ( "keep" | "modulate" | "synproxy" ) "state" @@ -2621,20 +2624,20 @@ filteropt = user | group | flags | icmp-type | icmp6-type | tos | "queue" ( string | "(" string [ [ "," ] string ] ")" ) | "probability" number"%" -nat-rule = [ "no" ] "nat" [ "pass" [ "log" | "log-all" ] ] +nat-rule = [ "no" ] "nat" [ "pass" [ "log" [ "(" logopts ")" ] ] ] [ "on" ifspec ] [ af ] [ protospec ] hosts [ "tag" string ] [ "tagged" string ] [ "->" ( redirhost | "{" redirhost-list "}" ) [ portspec ] [ pooltype ] [ "static-port" ] ] -binat-rule = [ "no" ] "binat" [ "pass" [ "log" | "log-all" ] ] +binat-rule = [ "no" ] "binat" [ "pass" [ "log" [ "(" logopts ")" ] ] ] [ "on" interface-name ] [ af ] [ "proto" ( proto-name | proto-number ) ] "from" address [ "/" mask-bits ] "to" ipspec [ "tag" string ] [ "tagged" string ] [ "->" address [ "/" mask-bits ] ] -rdr-rule = [ "no" ] "rdr" [ "pass" [ "log" | "log-all" ] ] +rdr-rule = [ "no" ] "rdr" [ "pass" [ "log" [ "(" logopts ")" ] ] ] [ "on" ifspec ] [ af ] [ protospec ] hosts [ "tag" string ] [ "tagged" string ] [ "->" ( redirhost | "{" redirhost-list "}" ) |