On 2008-12-10, Toni Mueller <[EMAIL PROTECTED]> wrote: > I have the following problem: For some packets, I would like to say > that some options be applied to packets. > > Example: > > pass on $ext_if all max-mss 1400 > > This line yields a syntax error.
you should use "scrub on ... max-mss 1400" > According to pf.conf(5), this should work, with the following > derivation: > > line -> pf-rule -> action "on" ifspec hosts filteropt-list > > and > > filteropt-list -> filteropt -> "max-mss" number the BNF section is wrong, there should be a separate 'scrub-rule' and the relevant options (max-mss, set-tos, no-df and some others) should be moved to something like 'scrubopt'. any volunteers for a diff? :-) this (in src/share/man/man5/pf.conf.5) is plaintext, you don't even need mdoc.samples(7).
