git: 398ca30cb6d6 - main - pfctl.8: mention -k source -k <IP>
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 14 Jan 2026 08:06:02 UTC
The branch main has been updated by kp:
URL: https://cgit.FreeBSD.org/src/commit/?id=398ca30cb6d6cb6f0f5433fae11d07a65a9259dd
commit 398ca30cb6d6cb6f0f5433fae11d07a65a9259dd
Author: Kristof Provost <kp@FreeBSD.org>
AuthorDate: 2026-01-10 09:43:09 +0000
Commit: Kristof Provost <kp@FreeBSD.org>
CommitDate: 2026-01-14 06:44:39 +0000
pfctl.8: mention -k source -k <IP>
Sponsored by: Rubicon Communications, LLC ("Netgate")
---
sbin/pfctl/pfctl.8 | 9 +++++++--
1 file changed, 7 insertions(+), 2 deletions(-)
diff --git a/sbin/pfctl/pfctl.8 b/sbin/pfctl/pfctl.8
index 45cfd88ef039..662f5a4b0f16 100644
--- a/sbin/pfctl/pfctl.8
+++ b/sbin/pfctl/pfctl.8
@@ -43,7 +43,7 @@
.Op Fl K Ar host | network
.Xo
.Oo Fl k
-.Ar host | network | label | id | gateway | nat
+.Ar host | network | label | id | gateway | source | nat
.Oc Xc
.Op Fl o Ar level
.Op Fl p Ar device
@@ -281,7 +281,7 @@ option may be specified, which will kill all the source tracking
entries from the first host/network to the second.
.It Xo
.Fl k
-.Ar host | network | label | id | key | gateway | nat
+.Ar host | network | label | id | key | gateway | source | nat
.Xc
Kill all of the state entries matching the specified
.Ar host ,
@@ -290,6 +290,7 @@ Kill all of the state entries matching the specified
.Ar id ,
.Ar key ,
.Ar gateway,
+.Ar source ,
or
.Ar nat.
.Pp
@@ -374,6 +375,10 @@ States can also be killed based on their pre-NAT address:
.Pp
.Dl # pfctl -k nat -k 192.168.0.1
.Pp
+To remove a source from a source limiter use:
+.Pp
+.Dl # pfctl -I 1 -k source -k 192.0.2.2
+.Pp
.It Fl M
Kill matching states in the opposite direction (on other interfaces) when
killing states.