The branch main has been updated by kp:
URL:
https://cgit.FreeBSD.org/src/commit/?id=eb01c0dfe27572247c64979f26d01ac11d3ff1bb
commit eb01c0dfe27572247c64979f26d01ac11d3ff1bb
Author: Kristof Provost <k...@freebsd.org>
AuthorDate: 2025-06-17 09:19:16 +0000
Commit: Kristof Provost <k...@freebsd.org>
CommitDate: 2025-06-25 20:04:15 +0000
pf.conf.5: tweak max-pkt-rate
Obtained from: OpenBSD, jmc <j...@openbsd.org>, fbac9b3f44
Sponsored by: Rubicon Communications, LLC ("Netgate")
---
share/man/man5/pf.conf.5 | 9 ++++-----
1 file changed, 4 insertions(+), 5 deletions(-)
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index 010096369c83..3bdba4958aea 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -2221,15 +2221,14 @@ Measure the rate of packets matching the rule and
states created by it.
When the specified rate is exceeded, the rule stops matching.
Only packets in the direction in which the state was created are considered,
so that typically requests are counted and replies are not.
-For example:
-.Pp
-.Bd -literal -offset indent -compact
+For example,
+to pass up to 100 ICMP packets per 10 seconds:
+.Bd -literal -offset indent
block in proto icmp
pass in proto icmp max-pkt-rate 100/10
.Ed
.Pp
-passes up to 100 icmp packets per 10 seconds.
-When the rate is exceeded, all icmp is blocked until the rate falls below
+When the rate is exceeded, all ICMP is blocked until the rate falls below
100 per 10 seconds again.
.Pp
.It Xo Ar queue Aq Ar queue
