Lines Matching +full:three +full:- +full:state

4 .\" Copyright (c) 2003-2004 Ryan McBride
32 .Nd packet filter state table synchronisation interface
46 interface is a pseudo-device which exposes certain changes to the state
49 State changes can be viewed by invoking
56 will also send state changes out on that interface,
57 and insert state changes received on that interface from other systems
58 into the state table.
60 By default, all local changes to the state table are exposed via
62 State changes from packets received by
66 .Ar no-sync
75 interface will attempt to collapse multiple state updates into a single
77 The maximum number of times a single state can be updated before a
94 .Bd -literal -offset indent
98 By default, state change messages are sent out on the synchronisation
112 .Bd -literal -offset indent
119 Either run the pfsync protocol on a trusted network \- ideally a network
130 using multicast with IPv6 link-local addresses, the
139 .Bd -literal -offset indent
154 .Bd -literal -offset indent
159 .Bl -tag -width indent
173 .Bl -tag -width indent
191 .Bl -tag -width indent
210 Both firewalls in this example have three
218 On all three interfaces, firewall A uses the .254 address, while firewall B
225 .Bd -literal -offset indent
244 .Bd -literal -offset indent
245 pass quick on { sis2 } proto pfsync keep state (no-sync)
246 pass on { sis0 sis1 } proto carp keep state (no-sync)
258 .Bd -literal -offset indent
264 .Bd -literal -offset indent