- Note that the synchronisation interface needs to be up and have

an IP address assigned.
- Add "quick" keyword to pf.conf example.

PR:		docs/85209
This commit is contained in:
Gleb Smirnoff 2006-06-06 12:35:53 +00:00
parent 0ae716e5ee
commit 301402accb
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=159338

View File

@ -26,7 +26,7 @@
.\"
.\" $FreeBSD$
.\"
.Dd February 23, 2005
.Dd June 6, 2006
.Dt PFSYNC 4
.Os
.Sh NAME
@ -104,6 +104,9 @@ interface:
# ifconfig pfsync0 syncdev fxp0
.Ed
.Pp
It is important that the underlying synchronisation interface is up
and has an IP address assigned.
.Pp
By default, state change messages are sent out on the synchronisation
interface using IP multicast packets.
The protocol is IP protocol 240, PFSYNC, and the multicast group
@ -206,7 +209,7 @@ The following should be added to the top of
.Pa /etc/pf.conf :
.Bd -literal -offset indent
pass quick on { sis2 } proto pfsync
pass on { sis0 sis1 } proto carp keep state
pass quick on { sis0 sis1 } proto carp keep state
.Ed
.Pp
If it is preferable that one firewall handle the traffic,