diff options
| author | glebius <glebius@FreeBSD.org> | 2006-06-06 12:35:53 +0000 |
|---|---|---|
| committer | glebius <glebius@FreeBSD.org> | 2006-06-06 12:35:53 +0000 |
| commit | cd66f71303569b6df424ed8ea3c44ece1cfed518 (patch) | |
| tree | 17a38ef99e49a99761dff4e29ae2bdb044a80f33 /contrib/pf | |
| parent | 75c47e2f153f496c215029acca7e69b103353e0d (diff) | |
| download | FreeBSD-src-cd66f71303569b6df424ed8ea3c44ece1cfed518.zip FreeBSD-src-cd66f71303569b6df424ed8ea3c44ece1cfed518.tar.gz | |
- Note that the synchronisation interface needs to be up and have
an IP address assigned.
- Add "quick" keyword to pf.conf example.
PR: docs/85209
Diffstat (limited to 'contrib/pf')
| -rw-r--r-- | contrib/pf/man/pfsync.4 | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/contrib/pf/man/pfsync.4 b/contrib/pf/man/pfsync.4 index abc81af..c919ca0 100644 --- a/contrib/pf/man/pfsync.4 +++ b/contrib/pf/man/pfsync.4 @@ -26,7 +26,7 @@ .\" .\" $FreeBSD$ .\" -.Dd February 23, 2005 +.Dd June 6, 2006 .Dt PFSYNC 4 .Os .Sh NAME @@ -104,6 +104,9 @@ interface: # ifconfig pfsync0 syncdev fxp0 .Ed .Pp +It is important that the underlying synchronisation interface is up +and has an IP address assigned. +.Pp By default, state change messages are sent out on the synchronisation interface using IP multicast packets. The protocol is IP protocol 240, PFSYNC, and the multicast group @@ -206,7 +209,7 @@ The following should be added to the top of .Pa /etc/pf.conf : .Bd -literal -offset indent pass quick on { sis2 } proto pfsync -pass on { sis0 sis1 } proto carp keep state +pass quick on { sis0 sis1 } proto carp keep state .Ed .Pp If it is preferable that one firewall handle the traffic, |
