From eaa3deb49e9a97ba42827597f4175b5c14305107 Mon Sep 17 00:00:00 2001 From: Kjell Wooding Date: Thu, 8 Jul 1999 05:05:11 +0000 Subject: There can be only one "HEAD" rule per group. --- sbin/ipf/ipf.5 | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/sbin/ipf/ipf.5 b/sbin/ipf/ipf.5 index ef6c9fc7ac5..2b23c2848b8 100644 --- a/sbin/ipf/ipf.5 +++ b/sbin/ipf/ipf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: ipf.5,v 1.13 1999/06/04 02:45:17 aaron Exp $ +.\" $OpenBSD: ipf.5,v 1.14 1999/07/08 05:05:10 kjell Exp $ .TH IPF 5 .SH NAME ipf \- IP packet filter rule syntax @@ -146,10 +146,13 @@ feature is for use by knowledgeable hackers, and is not currently documented. .TP .B "skip " +This action is not currently implemented. .TP .B auth +This action is not currently implemented. .TP .B preauth +This action is not currently implemented. .PP The next word must be either \fBin\fP or \fBout\fP. Each packet moving through the kernel is either inbound (just been received on an @@ -377,6 +380,8 @@ processing isn't stopped until it has returned from processing the group. .PP A rule may be both the head for a new group and a member of a non-default group (\fBhead\fP and \fBgroup\fP may be used together in a rule). +.PP +There may be only one \fBhead\fP rule per group. .TP .B "head " indicates that a new group (number n) should be created. -- cgit v1.2.3