From nobody Thu Feb 13 12:38:57 2025 X-Original-To: dev-commits-src-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Ytvr15zdhz5nR7d; Thu, 13 Feb 2025 12:38:57 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Ytvr15NFyz3ft6; Thu, 13 Feb 2025 12:38:57 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1739450337; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=oZIemDFlvQRf/QATFjTu5nCGRHISiY7lNa0o4v6G7xk=; b=koFKfxGU06mcXkaUk+3fhCMMCEIwo45eDCsue3GocQCke8H9ZEHBJq4QDv2htuJx13LJZS sojX+vaQ9JvgvFzaR26saz3zWHgo2M9FgOUHgOvS2aRTPRkjf/zqlkO8OI7XNBwpN9nBdq nit8+etXLlOdbp75csK0QbrcncZkiRicNIepLAvagwePFhYl0yoHHJQ35OeqoJj5lAGmcE oEz8NK58Z+K7Mx1YmvboPZy0enA23Tag/Pn7XlxBPjIjbSmK8bkxKlmfgOS3fQie+hogeJ p0kLkomYZHLlo2Y/33+ubvg5egIscmkhU2jxHXguGGwd+HP/2NHiQCmQ4TwOTw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1739450337; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=oZIemDFlvQRf/QATFjTu5nCGRHISiY7lNa0o4v6G7xk=; b=UCx6zCfr5NEKBsxLyntX2MjCk9vnmyCNaTeZxyg69kAhul1EDjfO3ND+7PRryjaMJ5yuDu /YW/kaji5JCkaNrpdNhSCSV2Enj96VOgRUIjvMAzZFOnhkTzV6IMPv0nIYFvw8XSezoPtw PqevAbjiBj6XdPeJJbsknsF9gKVib5w97+YbrvuaOMqYvC+AvdrK5yHbWGeU7glKDXic5O yiTkhYNhivKO54ThfVgKU3T/H49DVC3x9OrJzGz5xfcDCjnsPVpFxIZsfWha9gAKOZmO83 NMoR3Cgs9uvMyz+peaLoSIh4UgMAhVypM0xWt2kdGxaqKvmEhk+JOX6b7g/ZEQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1739450337; a=rsa-sha256; cv=none; b=XnPHy48StMwKD7PUI1VX3dFK/ujg1yb49I2kmpVn0vgVDKVPOVLWGo6XOsQ+gcoCHmv8ob sW8uj3+xbRNf6kHkY0xRqS6lhl8zEJvaKpWracA35BEwo3n6Yob47NN2pzD1YKQ3vA0crk wBw/4Ea0eOMDtg2iohIuNaF4XNIptTO3DwVTQBdmth5ThQvBrUr74gxwiYSPQhrKqS4wIm ofWKb8Esw4NRzDQt8cWKMtuWy66RHEZN72zlN1JXq7QlhLeRvhfHPtXvWixP12y1b4Z4UJ EfFuoZ0MLNzdiDat7v8ei/nUgveGt1IS1ZNhinTOahXudc/sPUCepksSv4yXPA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4Ytvr14rSNzm3F; Thu, 13 Feb 2025 12:38:57 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.18.1/8.18.1) with ESMTP id 51DCcvRn075330; Thu, 13 Feb 2025 12:38:57 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.18.1/8.18.1/Submit) id 51DCcvuM075327; Thu, 13 Feb 2025 12:38:57 GMT (envelope-from git) Date: Thu, 13 Feb 2025 12:38:57 GMT Message-Id: <202502131238.51DCcvuM075327@gitrepo.freebsd.org> To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Kristof Provost Subject: git: cdf415ecfd75 - main - pf.conf.5: make it clear that the default implicit 'pass' rule does not create state List-Id: Commit messages for the main branch of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-main@freebsd.org Sender: owner-dev-commits-src-main@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: kp X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: cdf415ecfd756b61ed0fad687ee97a12ec29cb5a Auto-Submitted: auto-generated The branch main has been updated by kp: URL: https://cgit.FreeBSD.org/src/commit/?id=cdf415ecfd756b61ed0fad687ee97a12ec29cb5a commit cdf415ecfd756b61ed0fad687ee97a12ec29cb5a Author: Kristof Provost AuthorDate: 2025-02-03 17:11:55 +0000 Commit: Kristof Provost CommitDate: 2025-02-13 12:38:42 +0000 pf.conf.5: make it clear that the default implicit 'pass' rule does not create state make sense to deraadt@, ok/wording tweak from mikeb. Obtained from: OpenBSD, sthen , 610eb54470 Sponsored by: Rubicon Communications, LLC ("Netgate") --- share/man/man5/pf.conf.5 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 4020243c521b..5ee660bd0202 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -707,7 +707,7 @@ For each packet processed by the packet filter, the filter rules are evaluated in sequential order, from first to last. The last matching rule decides what action is taken. If no rule matches the packet, the default action is to pass -the packet. +the packet without creating a state. .Pp The following actions can be used in the filter: .Bl -tag -width xxxx