From cd66f71303569b6df424ed8ea3c44ece1cfed518 Mon Sep 17 00:00:00 2001 From: glebius Date: Tue, 6 Jun 2006 12:35:53 +0000 Subject: - Note that the synchronisation interface needs to be up and have an IP address assigned. - Add "quick" keyword to pf.conf example. PR: docs/85209 --- contrib/pf/man/pfsync.4 | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) (limited to 'contrib/pf') diff --git a/contrib/pf/man/pfsync.4 b/contrib/pf/man/pfsync.4 index abc81af..c919ca0 100644 --- a/contrib/pf/man/pfsync.4 +++ b/contrib/pf/man/pfsync.4 @@ -26,7 +26,7 @@ .\" .\" $FreeBSD$ .\" -.Dd February 23, 2005 +.Dd June 6, 2006 .Dt PFSYNC 4 .Os .Sh NAME @@ -104,6 +104,9 @@ interface: # ifconfig pfsync0 syncdev fxp0 .Ed .Pp +It is important that the underlying synchronisation interface is up +and has an IP address assigned. +.Pp By default, state change messages are sent out on the synchronisation interface using IP multicast packets. The protocol is IP protocol 240, PFSYNC, and the multicast group @@ -206,7 +209,7 @@ The following should be added to the top of .Pa /etc/pf.conf : .Bd -literal -offset indent pass quick on { sis2 } proto pfsync -pass on { sis0 sis1 } proto carp keep state +pass quick on { sis0 sis1 } proto carp keep state .Ed .Pp If it is preferable that one firewall handle the traffic, -- cgit v1.1