CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/01/07 06:50:05
Modified files:
sbin/pfctl : parse.y pfctl_parser.c
share/man/man5 : pf.conf.5
sys/net : pf.c pf_ioctl.c pfvar.h
Log message:
This change extends pf(4) limiters so administrator
can specify action the rule executes when limit is
reached. By default when limit is reached the limiter
overrides action specified by rule to no-match.
If administrator wants to block packet instead then
rule with limiter should be changed to:
pass in from any to any state limiter test (block)
OK dlg@
