summaryrefslogtreecommitdiff
path: root/sbin/pfctl
diff options
context:
space:
mode:
authorKjell Wooding <kjell@cvs.openbsd.org>2001-06-25 16:12:34 +0000
committerKjell Wooding <kjell@cvs.openbsd.org>2001-06-25 16:12:34 +0000
commite04c06d2be89555d7490f2d2e40671c5708836f6 (patch)
tree870900ad8ab02b1ee451140951a50ae929dc1e19 /sbin/pfctl
parent63669dc26001daa0f4d9ee39b88afdced7897e5b (diff)
pfctl now has a manpage. likely needs fleshing out.
Diffstat (limited to 'sbin/pfctl')
-rw-r--r--sbin/pfctl/Makefile4
-rw-r--r--sbin/pfctl/pfctl.8100
2 files changed, 102 insertions, 2 deletions
diff --git a/sbin/pfctl/Makefile b/sbin/pfctl/Makefile
index 44bc6f17bd4..8e3fbabb685 100644
--- a/sbin/pfctl/Makefile
+++ b/sbin/pfctl/Makefile
@@ -1,8 +1,8 @@
#
-# $OpenBSD: Makefile,v 1.1 2001/06/24 21:04:15 kjell Exp $
+# $OpenBSD: Makefile,v 1.2 2001/06/25 16:12:33 kjell Exp $
PROG = pfctl
SRCS = pfctl.c pfctl_parser.c
-MAN=
+MAN = pfctl.8
.include <bsd.prog.mk>
diff --git a/sbin/pfctl/pfctl.8 b/sbin/pfctl/pfctl.8
new file mode 100644
index 00000000000..4844c7c2b32
--- /dev/null
+++ b/sbin/pfctl/pfctl.8
@@ -0,0 +1,100 @@
+.\" $OpenBSD: pfctl.8,v 1.1 2001/06/25 16:12:33 kjell Exp $
+.\"
+.\" Copyright (c) 2001 Kjell Wooding. All rights reserved.
+.\"
+.\" Redistribution and use in source and binary forms, with or without
+.\" modification, are permitted provided that the following conditions
+.\" are met:
+.\" 1. Redistributions of source code must retain the above copyright
+.\" notice, this list of conditions and the following disclaimer.
+.\" 2. Redistributions in binary form must reproduce the above copyright
+.\" notice, this list of conditions and the following disclaimer in the
+.\" documentation and/or other materials provided with the distribution.
+.\" 3. All advertising materials mentioning features or use of this software
+.\" must display the following acknowledgement:
+.\" This product includes software developed by Ericsson Radio Systems.
+.\" 4. The name of the author may not be used to endorse or promote products
+.\" derived from this software without specific prior written permission.
+.\"
+.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+.\" IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+.\" OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+.\" IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+.\" INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+.\" NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+.\" DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+.\" THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+.\"
+.Dd June 24, 2001
+.Dt PFCTL 8
+.Os
+.Sh NAME
+.Nm pfctl
+.Nd control the packet filter and NAT subsystems
+.Sh SYNOPSIS
+.Nm
+.Ar commands
+.Sh DESCRIPTION
+The
+.Nm
+utility communicates with the packet filter system using the
+ioctl interface described in
+.Xr pf 4
+.Pp
+The
+.Nm
+utility provides several commands:
+.Pp
+.Bl -tag -width "parse" -compact
+.It Cm start
+Start the packet filter.
+.It Cm stop
+Stop the packet filter.
+.It Cm show
+.Bl -tag -width "status" -compact
+.It Cm rules
+Show filter rules
+.It Cm nat
+Show NAT rules
+.It Cm states Op proto
+Show active states, optionally for a particular protocol
+.It Cm status
+Filter status
+.El
+.It Cm clear
+.Bl -tag -width "rules" -compact
+.It Cm rules
+Clear filter rules
+.It Cm nat
+Clear NAT rules
+.El
+.It Cm parse
+.Bl -tag -width "wules" -compact
+.It Cm rules Pa filename
+Test the syntax of a rules file
+.It Cm nat Pa filename
+Test the syntax of a NAT file
+.El
+.It Cm load
+.Bl -tag -width "rules" -compact
+.It Cm rules Pa filename
+Load rules into the filter
+.It Cm nat
+Load rules into NAT
+.El
+.It Cm log Ar if
+Enable logging for an interface
+.El
+.Pp
+.Sh BUGS
+Yes
+.Sh FILES
+.Bl -tag -width /etc/nat.rules
+.It Pa /etc/pf.rules
+packet filter rules file
+.It Pa /etc/nat.rules
+rules for Network Address Translation
+.Sh SEE ALSO
+.Xr pf 4