Lines Matching +full:three +full:- +full:state

4 .\" Copyright (c) 2003-2004 Ryan McBride
32 .Nd packet filter state table synchronisation interface
38 interface is a pseudo-device which exposes certain changes to the state
41 State changes can be viewed by invoking
48 will also send state changes out on that interface,
49 and insert state changes received on that interface from other systems
50 into the state table.
52 By default, all local changes to the state table are exposed via
54 State changes from packets received by
58 .Ar no-sync
67 interface will attempt to collapse multiple state updates into a single
69 The maximum number of times a single state can be updated before a
86 .Bd -literal -offset indent
90 By default, state change messages are sent out on the synchronisation
104 .Bd -literal -offset indent
111 Either run the pfsync protocol on a trusted network \- ideally a network
122 using multicast with IPv6 link-local addresses, the
131 .Bd -literal -offset indent
146 .Bd -literal -offset indent
151 .Bl -tag -width indent
163 .Bl -tag -width ".Va net.pfsync"
192 Both firewalls in this example have three
200 On all three interfaces, firewall A uses the .254 address, while firewall B
207 .Bd -literal -offset indent
226 .Bd -literal -offset indent
227 pass quick on { sis2 } proto pfsync keep state (no-sync)
228 pass on { sis0 sis1 } proto carp keep state (no-sync)
240 .Bd -literal -offset indent
246 .Bd -literal -offset indent