Attachment #174638 for bug #212574

View | Details | Raw Unified | Return to bug 212574
Collapse All | Expand All




.\"
.\" $FreeBSD$
.\"
.Dd September 11, 2016
.Dt PFCTL 8
.Os
.Sh NAME

optimization done automatically by the kernel
will skip evaluation of rules where possible.
Packets passed statefully are counted in the rule that created the state
(even though the rule is not evaluated more than once for the entire
connection).
.It Fl s Cm Anchors
Show the currently loaded anchors directly attached to the main ruleset.

.Dq Pass
counters when a
.Dq stateful
packet is passed but does not match the table anymore.
This will happen in our example if someone flushes the table while the
.Xr ping 8
command is running.

For constant tables, which cannot be altered outside
.Xr pf.conf 5 .
.It p
For persistent tables, which do not get automatically killed when no rules
refer to them.
.It a
For tables which are part of the

.Pp
.Bl -tag -width xxxxxxxxxxxx -compact
.It Fl x Cm none
Do not generate debug messages.
.It Fl x Cm urgent
Generate debug messages only for serious errors.
.It Fl x Cm misc

.Nm
program and the
.Xr pf 4
filter mechanism appeared in
.Ox 3.0 .
They first appeared in
.Fx 5.3
ported from the version in
.Ox 3.5

Return to bug 212574

Lines 26-32 Link Here

(-)sbin/pfctl/pfctl.8 (-6 / +10 lines)
26	.\"	26	.\"
27	.\" $FreeBSD$	27	.\" $FreeBSD$
28	.\"	28	.\"
29	.Dd June 21, 2011	29	.Dd September 11, 2016
30	.Dt PFCTL 8	30	.Dt PFCTL 8
31	.Os	31	.Os
32	.Sh NAME	32	.Sh NAME
Lines 390-396 Link Here
390	optimization done automatically by the kernel	390	optimization done automatically by the kernel
391	will skip evaluation of rules where possible.	391	will skip evaluation of rules where possible.
392	Packets passed statefully are counted in the rule that created the state	392	Packets passed statefully are counted in the rule that created the state
393	(even though the rule isn't evaluated more than once for the entire	393	(even though the rule is not evaluated more than once for the entire
394	connection).	394	connection).
395	.It Fl s Cm Anchors	395	.It Fl s Cm Anchors
396	Show the currently loaded anchors directly attached to the main ruleset.	396	Show the currently loaded anchors directly attached to the main ruleset.
Lines 593-599 Link Here
593	.Dq Pass	593	.Dq Pass
594	counters when a	594	counters when a
595	.Dq stateful	595	.Dq stateful
596	packet is passed but doesn't match the table anymore.	596	packet is passed but does not match the table anymore.
597	This will happen in our example if someone flushes the table while the	597	This will happen in our example if someone flushes the table while the
598	.Xr ping 8	598	.Xr ping 8
599	command is running.	599	command is running.
Lines 609-615 Link Here
609	For constant tables, which cannot be altered outside	609	For constant tables, which cannot be altered outside
610	.Xr pf.conf 5 .	610	.Xr pf.conf 5 .
611	.It p	611	.It p
612	For persistent tables, which don't get automatically killed when no rules	612	For persistent tables, which do not get automatically killed when no rules
613	refer to them.	613	refer to them.
614	.It a	614	.It a
615	For tables which are part of the	615	For tables which are part of the
Lines 648-654 Link Here
648	.Pp	648	.Pp
649	.Bl -tag -width xxxxxxxxxxxx -compact	649	.Bl -tag -width xxxxxxxxxxxx -compact
650	.It Fl x Cm none	650	.It Fl x Cm none
651	Don't generate debug messages.	651	Do not generate debug messages.
652	.It Fl x Cm urgent	652	.It Fl x Cm urgent
653	Generate debug messages only for serious errors.	653	Generate debug messages only for serious errors.
654	.It Fl x Cm misc	654	.It Fl x Cm misc
Lines 682-686 Link Here
682	.Nm	682	.Nm
683	program and the	683	program and the
684	.Xr pf 4	684	.Xr pf 4
685	filter mechanism first appeared in	685	filter mechanism appeared in
686	.Ox 3.0 .	686	.Ox 3.0 .
		687	They first appeared in
		688	.Fx 5.3
		689	ported from the version in
		690	.Ox 3.5