diff options
| author |   jmc <jmc@openbsd.org> | 2005-06-05 13:46:30 +0000 |
|---|---|---|
| committer | jmc <jmc@openbsd.org> | 2005-06-05 13:46:30 +0000 |
| commit | 1da91fb6a01b356bea30b8da3d05849cb21c409e (patch) | |
| tree | cb40b5616fce76966980fe327d0e0ea95bf1f5d1 /share | |
| parent | if functions permits null reply from minibuffer, use eread (with (diff) | |
| download | wireguard-openbsd-1da91fb6a01b356bea30b8da3d05849cb21c409e.tar.xz wireguard-openbsd-1da91fb6a01b356bea30b8da3d05849cb21c409e.zip | |
(lightly) document carp(4) in reference to state table;
suggested by alexey e. suslikov;
better wording + ok joel@
Diffstat (limited to 'share')
| -rw-r--r-- | share/man/man5/pf.conf.5 | 12 |
1 files changed, 11 insertions, 1 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index a3e636fa667..ffa6cc85e41 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.333 2005/06/03 22:14:37 jmc Exp $ +.\" $OpenBSD: pf.conf.5,v 1.334 2005/06/05 13:46:30 jmc Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" All rights reserved. @@ -1858,6 +1858,15 @@ Using a modifier on .Ar modulate state rules between fast networks is suggested to prevent ACK storms. +.Pp +Note that alternative methods are available +to prevent loss of the state table +and allow for firewall failover. +See +.Xr carp 4 +and +.Xr pfsync 4 +for further information. .Sh SYN PROXY By default, .Xr pf 4 @@ -2803,6 +2812,7 @@ Service name database. Example rulesets. .El .Sh SEE ALSO +.Xr carp 4 , .Xr icmp 4 , .Xr icmp6 4 , .Xr ip 4 , |