diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 733b00cc673..bfa79b928b6 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -27,7 +27,7 @@ .\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE .\" POSSIBILITY OF SUCH DAMAGE. .\" -.Dd September 4, 2024 +.Dd September 6, 2024 .Dt PF.CONF 5 .Os .Sh NAME @@ -2118,6 +2118,11 @@ For example: pass in proto tcp to port 25 set prio 2 pass in proto tcp to port 22 set prio (2, 5) .Ed +.It Ar received-on Aq Ar interface +Only match packets which were received on the specified +.Ar interface +(or interface group). +.Ed .It Ar tag Aq Ar string Packets matching this rule will be tagged with the specified string. @@ -3231,7 +3236,8 @@ filteropt = user | group | flags | icmp-type | icmp6-type | "tos" tos | "rtable" number | "probability" number"%" | "prio" number | "dnpipe" ( number | "(" number "," number ")" ) | "dnqueue" ( number | "(" number "," number ")" ) | - "ridentifier" number + "ridentifier" number | + "received-on" ( interface-name | interface-group ) nat-rule = [ "no" ] "nat" [ "pass" [ "log" [ "(" logopts ")" ] ] ] [ "on" ifspec ] [ af ]