diff options
author | 2003-05-17 05:51:09 +0000 | |
---|---|---|
committer | 2003-05-17 05:51:09 +0000 | |
commit | 37f76eaaaa0e036cd5c26dd6e370f3fda093e417 (patch) | |
tree | 8238a5c10cbd58b31c5593fb20fe6b9114865c5d | |
parent | make this function available to others (diff) | |
download | wireguard-openbsd-37f76eaaaa0e036cd5c26dd6e370f3fda093e417.tar.xz wireguard-openbsd-37f76eaaaa0e036cd5c26dd6e370f3fda093e417.zip |
document tags
ok henning@
-rw-r--r-- | share/man/man5/pf.conf.5 | 11 |
1 files changed, 9 insertions, 2 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 906fc56bd65..4432f10595a 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.241 2003/05/16 18:38:47 jmc Exp $ +.\" $OpenBSD: pf.conf.5,v 1.242 2003/05/17 05:51:09 david Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -1358,6 +1358,13 @@ For example: pass in proto tcp to port 25 queue mail pass in proto tcp to port 22 queue(ssh_bulk, ssh_prio) .Ed +.It Ar tag <string> +A tag will be assigned to packets matching this rule. +This tag can be later used to filter packets with that tag, +even on another interface. +.It Ar tagged <string> +This rule applies only to packets that have been tagged with the named +tag. .El .Sh ROUTING If a packet matches a rule with a route option set, the packet filter will @@ -2079,7 +2086,7 @@ filteropt = USER | GROUP | FLAGS | ICMP-TYPE | ICMP6-TYPE | TOS | ( keep | modulate ) state [ '(' STATE-OPTS ')' ] | fragment | no-df | min-ttl NUMBER | max-mss NUMBER | random-id | reassemble tcp | FRAGMENTATION | allow-opts | - label STRING | + label STRING | tag STRING | tagged STRING queue '(' STRING | ( STRING [ [ ',' ] STRING ] ) ')' nat-rule = [ no ] nat [ on IFSPEC ] [ AF ] [ PROTOSPEC ] |