CVSROOT: /cvs
Module name: src
Changes by: r...@cvs.openbsd.org 2012/10/18 09:18:57
Modified files:
share/man/man5 : pf.conf.5
sbin/pfctl : parse.y
Log message:
Disallow tables and interface address pools for rdr-to, nat-to and
route-to with any other scheduling algorithms than round-robin or
least-states. Before this change, pfctl accepted and loaded invalid
address pools, eg. "rdr-to <table> source-hash", but it is not
supported by the kernel and was silently ignored in operation.
Also clarify the manpage a bit by mentioning that tables are only
valid with round-robin or least-states.
ok zinke@
