summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authordavid <david@openbsd.org>2003-05-17 05:51:09 +0000
committerdavid <david@openbsd.org>2003-05-17 05:51:09 +0000
commit37f76eaaaa0e036cd5c26dd6e370f3fda093e417 (patch)
tree8238a5c10cbd58b31c5593fb20fe6b9114865c5d
parentmake this function available to others (diff)
downloadwireguard-openbsd-37f76eaaaa0e036cd5c26dd6e370f3fda093e417.tar.xz
wireguard-openbsd-37f76eaaaa0e036cd5c26dd6e370f3fda093e417.zip
document tags
ok henning@
-rw-r--r--share/man/man5/pf.conf.511
1 files changed, 9 insertions, 2 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index 906fc56bd65..4432f10595a 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pf.conf.5,v 1.241 2003/05/16 18:38:47 jmc Exp $
+.\" $OpenBSD: pf.conf.5,v 1.242 2003/05/17 05:51:09 david Exp $
.\"
.\" Copyright (c) 2002, Daniel Hartmeier
.\" All rights reserved.
@@ -1358,6 +1358,13 @@ For example:
pass in proto tcp to port 25 queue mail
pass in proto tcp to port 22 queue(ssh_bulk, ssh_prio)
.Ed
+.It Ar tag <string>
+A tag will be assigned to packets matching this rule.
+This tag can be later used to filter packets with that tag,
+even on another interface.
+.It Ar tagged <string>
+This rule applies only to packets that have been tagged with the named
+tag.
.El
.Sh ROUTING
If a packet matches a rule with a route option set, the packet filter will
@@ -2079,7 +2086,7 @@ filteropt = USER | GROUP | FLAGS | ICMP-TYPE | ICMP6-TYPE | TOS |
( keep | modulate ) state [ '(' STATE-OPTS ')' ] |
fragment | no-df | min-ttl NUMBER | max-mss NUMBER |
random-id | reassemble tcp | FRAGMENTATION | allow-opts |
- label STRING |
+ label STRING | tag STRING | tagged STRING
queue '(' STRING | ( STRING [ [ ',' ] STRING ] ) ')'
nat-rule = [ no ] nat [ on IFSPEC ] [ AF ] [ PROTOSPEC ]