In the handbook page on using firewalls with blacklistd: https://www.freebsd.org/doc/handbook/firewalls-blacklistd.html the bottom example lists the blacklisted entries with # pfctl -a blacklistd/22 -t port22 -T show and then instructs the user to use the following to delete one of those entries using: # pfctl -a blacklistd/22 -T delete 213.0.123.128/25 However the command fails because it is missing the "-t port22" It should read # pfctl -a blacklistd/22 -t port22 -T delete 213.0.123.128/25 I'm not sure where the Handbook sources reside to make what should otherwise be a fairly straightforward patch/diff.