From nobody Wed Aug 20 08:10:39 2025 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4c6Jzj1rFnz64ZQM; Wed, 20 Aug 2025 08:10:41 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R10" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4c6Jzh4rmHz3cj4; Wed, 20 Aug 2025 08:10:40 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1755677440; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=zLWe/Dq4U5m0Vl8rhz3adTLz6GqdM8PZW8z8Bagka7o=; b=WA+/V6rrhVbH98cQAl8KeQK1WeSqC3A3KxP0m6l0cVpvs+Li7sKidmKEbmMZbPdAn9z3BL PRtFnhffHcMxIoHFGacGQRTD54qqnkUq9kEf03UbyrYMdcvDVnnxeIDDJClT9VEC2nxSAo nkXYWcbbSpKBBunO/v1TTPRygQ/4tsSDFOGFuXs62QB+BzdMNRjR6z4A+heT/V65V+uv0m XYLW0VSLcTMO7v5atjeDh72fEAYJJh8wvlf/DQvs445ZXkcF8W/8cFLFps0HVMkXkLoKii R/uNyyVXOrx2SZQ/TV/hiCHtKxUa1uqQtgUxdL+lFafgM4Y0opbY6ODRp2BqtQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1755677440; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=zLWe/Dq4U5m0Vl8rhz3adTLz6GqdM8PZW8z8Bagka7o=; b=INd5BlOb3ko25H9Ivt8fnTqZcPXcf5b7cqXWPsOf88wKpsmO9BDCQdFO7zO8ZApR2veBOP rH0339yyOW8JJoLxrl9Onh6wOi4vSGAhmCX0X6cGfoUjDNTovNa+7RVe8V7vwC193l2aqk 84NDxewsSi/1T6T9Ldh3pD+vzPauHvQT18s6M1fJpNMMCF1xlieRCeqTQZ06u2TSDTEDCA pWzLxl9VggFgdsVVpWoJDgUK4gsKgB/juveoc+2v/2eh62DMdc3pa+grhtNWELiA9CNQd5 6OLxuCoHIf/IzHO1Heq383sV4kNiJAgj3/9zZtPsFvRKj91NNc4ZGmj52kqd+Q== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1755677440; a=rsa-sha256; cv=none; b=yz5n6mGvXEr+mU4iSrgplxx+63RlCMcCzBNtfq/cVpwIrHu4wCQiNaXYT+Dxh2psoH71eS cIUFyvjDeRmFrobVMnjtuV2Uf3+tDzT8zdwVcjY1x6Ib5sqrcYL2TwK0xucDOG832cnFxy 1/IS33agiOy5+JjYL3HS9LziFb5k9gKFT7kJysgt6kHTVYEqZNcFIeXJjmHrG/xyaCFRIg 0rXHLkm1jvEimVP9OSzR4CL4LTtMJz+wY+0T8WqICOKktQuIvVGv9qKS9PWEk2N67T+mH1 rvMynqwRQ9c3NVRCsj5UvRhnoJP7rPux50tMr1dphE3Zd0By/yC2HbmTKfdunA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4c6Jzg6L34z14Pk; Wed, 20 Aug 2025 08:10:39 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 57K8AdIe066046; Wed, 20 Aug 2025 08:10:39 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 57K8AdpS066043; Wed, 20 Aug 2025 08:10:39 GMT (envelope-from git) Date: Wed, 20 Aug 2025 08:10:39 GMT Message-Id: <202508200810.57K8AdpS066043@gitrepo.freebsd.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Kristof Provost Subject: git: 063dc452cc96 - main - pfctl.8: small cleanups List-Id: Commit messages for the main branch of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-main@freebsd.org Sender: owner-dev-commits-src-main@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: kp X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 063dc452cc963e87553d5afb501df062c7f37eb8 Auto-Submitted: auto-generated The branch main has been updated by kp: URL: https://cgit.FreeBSD.org/src/commit/?id=063dc452cc963e87553d5afb501df062c7f37eb8 commit 063dc452cc963e87553d5afb501df062c7f37eb8 Author: Kristof Provost AuthorDate: 2025-08-05 13:42:25 +0000 Commit: Kristof Provost CommitDate: 2025-08-20 08:08:46 +0000 pfctl.8: small cleanups - show -R with -s in options list - show -t with -T in options list - sort the -T commands - small text/formatting tweaks ok sthen ok kn on an earlier version Obtained from: OpenBSD, jmc , bc345da85f Sponsored by: Rubicon Communications, LLC ("Netgate") --- sbin/pfctl/pfctl.8 | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/sbin/pfctl/pfctl.8 b/sbin/pfctl/pfctl.8 index f582c6301124..5a74a8fd3444 100644 --- a/sbin/pfctl/pfctl.8 +++ b/sbin/pfctl/pfctl.8 @@ -24,7 +24,7 @@ .\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF .\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. .\" -.Dd July 7, 2025 +.Dd August 5, 2025 .Dt PFCTL 8 .Os .Sh NAME @@ -410,6 +410,7 @@ This is the default behaviour. .It Fl o Cm profile Enable basic ruleset optimizations with profiling. .El +.Pp For further information on the ruleset optimizer, see .Xr pf.conf 5 . .It Fl P @@ -431,7 +432,7 @@ Perform reverse DNS lookups on states and tables when displaying them. and .Fl r are mutually exclusive. -.It Fl s Ar modifier +.It Fl s Ar modifier Op Fl R Ar id Show the filter parameters specified by .Ar modifier (may be abbreviated): @@ -563,19 +564,16 @@ no free ports in translation port range .It Fl S Do not perform domain name resolution. If a name cannot be resolved without DNS, an error will be reported. -.It Fl T Ar command Op Ar address ... +.It Fl t Ar table Fl T Ar command Op Ar address ... Specify the .Ar command -(may be abbreviated) to apply to the table. +(may be abbreviated) to apply to +.Ar table . Commands include: .Pp -.Bl -tag -width xxxxxxxxxxxx -compact -.It Fl T Cm kill -Kill a table. -.It Fl T Cm flush -Flush all addresses of a table. +.Bl -tag -width "-T expire number" -compact .It Fl T Cm add -Add one or more addresses in a table. +Add one or more addresses to a table. Automatically create a persistent table if it does not exist. .It Fl T Cm delete Delete one or more addresses from a table. @@ -586,6 +584,10 @@ seconds ago. For entries which have never had their statistics cleared, .Ar number refers to the time they were added to the table. +.It Fl T Cm flush +Flush all addresses in a table. +.It Fl T Cm kill +Kill a table. .It Fl T Cm replace Replace the addresses of the table. Automatically create a persistent table if it does not exist. @@ -765,8 +767,6 @@ tables of the same name from anchors attached below it. .It C This flag is set when per-address counters are enabled on the table. .El -.It Fl t Ar table -Specify the name of the table. .It Fl v Produce more verbose output. A second use of