pf.conf.5: document received-on

Reviewed by:	zlei
Obtained from:	OpenBSD, dlg <dlg@openbsd.org>, 456093dddc
Obtained from:	OpenBSD, jmc <jmc@openbsd.org>, 2bf0158fa8
Obtained from:	OpenBSD, deraadt <deraadt@openbsd.org>, be785dc6e2
Sponsored by:	Rubicon Communications, LLC ("Netgate")
Differential Revision:	https://reviews.freebsd.org/D46579

share/man/man5/pf.conf.5

@@ -27,7 +27,7 @@
 .\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 .\" POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd September 4, 2024
+.Dd September 6, 2024
 .Dt PF.CONF 5
 .Os
 .Sh NAME
@@ -2118,6 +2118,11 @@ For example:
 pass in proto tcp to port 25 set prio 2
 pass in proto tcp to port 22 set prio (2, 5)
 .Ed
+.It Ar received-on Aq Ar interface
+Only match packets which were received on the specified
+.Ar interface
+(or interface group).
+.Ed
 .It Ar tag Aq Ar string
 Packets matching this rule will be tagged with the
 specified string.
@@ -3231,7 +3236,8 @@ filteropt      = user | group | flags | icmp-type | icmp6-type | "tos" tos |
                  "rtable" number | "probability" number"%" | "prio" number |
                  "dnpipe" ( number | "(" number "," number ")" ) |
                  "dnqueue" ( number | "(" number "," number ")" ) |
-                 "ridentifier" number
+                 "ridentifier" number |
+                 "received-on" ( interface-name | interface-group )
 
 nat-rule       = [ "no" ] "nat" [ "pass" [ "log" [ "(" logopts ")" ] ] ]
                  [ "on" ifspec ] [ af ]