route labels in pf.conf
Niki Denev
nike_d at cytexbg.com
Sun Feb 19 03:59:34 PST 2006
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi,
on one 6.1-PRERELEASE box i found that pf.conf's manual page
mentions rtlabels :
route <label> Any address whose associated route has label
<label>. See route(4) and route(8).
But it seems that this is OpenBSD specific, and not implemented in FreeBSD?
While it would be VERY cool to have this feature in FreeBSD, maybe
the manual page should be updated to not include it for now?
- --- pf.conf.5.orig Sun Feb 19 13:49:27 2006
+++ pf.conf.5 Sun Feb 19 13:53:10 2006
@@ -1283,13 +1283,6 @@
.Bl -tag -width xxxxxxxxxxxxxx -compact
.It Ar any
Any address.
- -.It Ar route <label>
- -Any address whose associated route has label
- -.Ar <label> .
- -See
- -.Xr route 4
- -and
- -.Xr route 8 .
.It Ar no-route
Any address which is not currently routable.
.It Ar <table>
@@ -1383,7 +1376,6 @@
pass in proto tcp from 10.0.0.0/8 port > 1024 \e
to ! 10.1.2.3 port != ssh
pass in proto tcp from any os "OpenBSD" flags S/SA
- -pass in proto tcp from route "DTAG"
.Ed
.It Ar all
This is equivalent to "from any to any".
@@ -2734,7 +2726,7 @@
"from" ( "any" | "no-route" | "self" | host |
"{" host-list "}" | "route" string ) [ port ] [ os ]
"to" ( "any" | "no-route" | "self" | host |
- - "{" host-list "}" | "route" string ) [ port ]
+ "{" host-list "}" ) [ port ]
ipspec = "any" | host | "{" host-list "}"
host = [ "!" ] ( address [ "/" mask-bits ] | "<" string ">" )
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFD+F2UHNAJ/fLbfrkRArcrAJwIh/PGHpj9U3kK4+LHXFW/zt0ndACffLgj
s637CU1zenkNpi/8cIvoh7w=
=J1Oi
-----END PGP SIGNATURE-----
More information about the freebsd-net
mailing list