diff options
| author |   jmc <jmc@openbsd.org> | 2017-11-13 18:18:53 +0000 |
|---|---|---|
| committer | jmc <jmc@openbsd.org> | 2017-11-13 18:18:53 +0000 |
| commit | fbac9b3f44883e497ba9b5775e275ab0274db38d (patch) | |
| tree | 5002323f2481892b9cef219c282b47cf190c3871 /share/man/man5 | |
| parent | Grab the KERNEL_LOCK() to iterate on the global list of PF_KEY sockets. (diff) | |
| download | wireguard-openbsd-fbac9b3f44883e497ba9b5775e275ab0274db38d.tar.xz wireguard-openbsd-fbac9b3f44883e497ba9b5775e275ab0274db38d.zip | |
tweak previous;
Diffstat (limited to 'share/man/man5')
| -rw-r--r-- | share/man/man5/pf.conf.5 | 11 |
1 files changed, 5 insertions, 6 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index c0f85cc6f7f..9c22845165a 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.570 2017/11/13 11:30:11 henning Exp $ +.\" $OpenBSD: pf.conf.5,v 1.571 2017/11/13 18:18:53 jmc Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" Copyright (c) 2003 - 2013 Henning Brauer <henning@openbsd.org> @@ -631,15 +631,14 @@ Measure the rate of packets matching the rule and states created by it. When the specified rate is exceeded, the rule stops matching. Only packets in the direction in which the state was created are considered, so that typically requests are counted and replies are not. -For example: -.Pp -.Bd -literal -offset indent -compact +For example, +to pass up to 100 ICMP packets per 10 seconds: +.Bd -literal -offset indent block in proto icmp pass in proto icmp max-pkt-rate 100/10 .Ed .Pp -passes up to 100 icmp packets per 10 seconds. -When the rate is exceeded, all icmp is blocked until the rate falls below +When the rate is exceeded, all ICMP is blocked until the rate falls below 100 per 10 seconds again. .Pp .It Cm once |