[src/netbsd-6-0]: src/usr.sbin/npf/npfctl Pull up following revision(s) (requ...

[riz <riz%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/45c8f7b944b2
branches:  netbsd-6-0
changeset: 774718:45c8f7b944b2
user:      riz <riz%NetBSD.org@localhost>
date:      Sat Dec 15 23:34:31 2012 +0000

description:
Pull up following revision(s) (requested by rmind in ticket #744):
        usr.sbin/npf/npfctl/npf.conf.5: revision 1.25
- npf.conf(5): fix of the example config.
- Mention npf_ext_log in a comment.

diffstat:

 usr.sbin/npf/npfctl/npf.conf.5 |  7 ++++---
 1 files changed, 4 insertions(+), 3 deletions(-)

diffs (32 lines):

diff -r 9b1906d566b8 -r 45c8f7b944b2 usr.sbin/npf/npfctl/npf.conf.5
--- a/usr.sbin/npf/npfctl/npf.conf.5    Thu Dec 13 23:42:29 2012 +0000
+++ b/usr.sbin/npf/npfctl/npf.conf.5    Sat Dec 15 23:34:31 2012 +0000
@@ -1,4 +1,4 @@
-.\"    $NetBSD: npf.conf.5,v 1.9.2.4 2012/10/01 20:05:56 riz Exp $
+.\"    $NetBSD: npf.conf.5,v 1.9.2.4.2.1 2012/12/15 23:34:31 riz Exp $
 .\"
 .\" Copyright (c) 2009-2012 The NetBSD Foundation, Inc.
 .\" All rights reserved.
@@ -27,7 +27,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 .\" POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd September 30, 2012
+.Dd December 6, 2012
 .Dt NPF.CONF 5
 .Os
 .Sh NAME
@@ -272,11 +272,12 @@
 map $ext_if dynamic 10.1.1.2 port 22 <- $ext_if 9022
 
 procedure "log" {
+       # Note: npf_ext_log kernel module should be loaded, if not built-in.
        log: npflog0
 }
 
 group (name "external", interface $ext_if) {
-       pass stateful out final from $ext_if
+       pass stateful out final all
 
        block in final from \*[Lt]1\*[Gt]
        pass stateful in final family inet proto tcp to $ext_if port ssh apply "log"