Module Name: src Committed By: rmind Date: Thu Dec 6 22:36:51 UTC 2012
Modified Files: src/usr.sbin/npf/npfctl: npf.conf.5 Log Message: - npf.conf(5): fix of the example config. - Mention npf_ext_log in a comment. To generate a diff of this commit: cvs rdiff -u -r1.24 -r1.25 src/usr.sbin/npf/npfctl/npf.conf.5 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
Modified files: Index: src/usr.sbin/npf/npfctl/npf.conf.5 diff -u src/usr.sbin/npf/npfctl/npf.conf.5:1.24 src/usr.sbin/npf/npfctl/npf.conf.5:1.25 --- src/usr.sbin/npf/npfctl/npf.conf.5:1.24 Mon Nov 26 20:34:28 2012 +++ src/usr.sbin/npf/npfctl/npf.conf.5 Thu Dec 6 22:36:51 2012 @@ -1,4 +1,4 @@ -.\" $NetBSD: npf.conf.5,v 1.24 2012/11/26 20:34:28 rmind Exp $ +.\" $NetBSD: npf.conf.5,v 1.25 2012/12/06 22:36:51 rmind Exp $ .\" .\" Copyright (c) 2009-2012 The NetBSD Foundation, Inc. .\" All rights reserved. @@ -27,7 +27,7 @@ .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE .\" POSSIBILITY OF SUCH DAMAGE. .\" -.Dd November 26, 2012 +.Dd December 6, 2012 .Dt NPF.CONF 5 .Os .Sh NAME @@ -284,11 +284,12 @@ map $ext_if dynamic 10.1.1.0/24 -> $ext_ map $ext_if dynamic 10.1.1.2 port 22 <- $ext_if 9022 procedure "log" { + # Note: npf_ext_log kernel module should be loaded, if not built-in. log: npflog0 } group (name "external", interface $ext_if) { - pass stateful out final from $ext_if + pass stateful out final all block in final from \*[Lt]1\*[Gt] pass stateful in final family inet proto tcp to $ext_if port ssh apply "log"