mirror of
https://git.FreeBSD.org/src.git
synced 2026-06-02 11:24:32 +00:00
pfctl: clarify usage of load option flags
`pfctl -A`, `-N`, `-O`, and `-R` restrict which rule types and options
are loaded. The man page language ("Load only...") does not make it
clear that these options can be combined to (re)load multiple rule types
and/or options without reloading the entire packet filter.
Add language to make it explicitly clear that these flags combine.
Reviewed by: kp
Signed-off-by: Ross Williams <ross@ross-williams.net>
This commit is contained in:
committed by
Kristof Provost
parent
ff76ec3e9b
commit
19eecf94fa
@@ -110,6 +110,12 @@ The options are as follows:
|
||||
.It Fl A
|
||||
Load only the queue rules present in the rule file.
|
||||
Other rules and options are ignored.
|
||||
Can be combined with the
|
||||
.Fl N ,
|
||||
.Fl O ,
|
||||
and
|
||||
.Fl R
|
||||
flags to load multiple rule types without (re)loading all rules.
|
||||
.It Fl a Ar anchor
|
||||
Apply flags
|
||||
.Fl f ,
|
||||
@@ -399,11 +405,23 @@ Allows single options to be modified without disturbing the others:
|
||||
.It Fl N
|
||||
Load only the NAT rules present in the rule file.
|
||||
Other rules and options are ignored.
|
||||
Can be combined with the
|
||||
.Fl A ,
|
||||
.Fl O ,
|
||||
and
|
||||
.Fl R
|
||||
flags to load multiple rule types without (re)loading all rules.
|
||||
.It Fl n
|
||||
Do not actually load rules, just parse them.
|
||||
.It Fl O
|
||||
Load only the options present in the rule file.
|
||||
Other rules and options are ignored.
|
||||
Can be combined with the
|
||||
.Fl A ,
|
||||
.Fl N ,
|
||||
and
|
||||
.Fl R
|
||||
flags to load multiple rule types without (re)loading all rules.
|
||||
.It Fl o Ar level
|
||||
Control the ruleset optimizer, overriding any rule file settings.
|
||||
.Pp
|
||||
@@ -432,6 +450,12 @@ Only print errors and warnings.
|
||||
.It Fl R
|
||||
Load only the filter rules present in the rule file.
|
||||
Other rules and options are ignored.
|
||||
Can be combined with the
|
||||
.Fl A ,
|
||||
.Fl N ,
|
||||
and
|
||||
.Fl O
|
||||
flags to load multiple rule types without (re)loading all rules.
|
||||
.It Fl r
|
||||
Perform reverse DNS lookups on states and tables when displaying them.
|
||||
.Fl N
|
||||
|
||||
Reference in New Issue
Block a user