diff options
author | Kjell Wooding <kjell@cvs.openbsd.org> | 2001-06-25 16:12:34 +0000 |
---|---|---|
committer | Kjell Wooding <kjell@cvs.openbsd.org> | 2001-06-25 16:12:34 +0000 |
commit | e04c06d2be89555d7490f2d2e40671c5708836f6 (patch) | |
tree | 870900ad8ab02b1ee451140951a50ae929dc1e19 /sbin/pfctl | |
parent | 63669dc26001daa0f4d9ee39b88afdced7897e5b (diff) |
pfctl now has a manpage. likely needs fleshing out.
Diffstat (limited to 'sbin/pfctl')
-rw-r--r-- | sbin/pfctl/Makefile | 4 | ||||
-rw-r--r-- | sbin/pfctl/pfctl.8 | 100 |
2 files changed, 102 insertions, 2 deletions
diff --git a/sbin/pfctl/Makefile b/sbin/pfctl/Makefile index 44bc6f17bd4..8e3fbabb685 100644 --- a/sbin/pfctl/Makefile +++ b/sbin/pfctl/Makefile @@ -1,8 +1,8 @@ # -# $OpenBSD: Makefile,v 1.1 2001/06/24 21:04:15 kjell Exp $ +# $OpenBSD: Makefile,v 1.2 2001/06/25 16:12:33 kjell Exp $ PROG = pfctl SRCS = pfctl.c pfctl_parser.c -MAN= +MAN = pfctl.8 .include <bsd.prog.mk> diff --git a/sbin/pfctl/pfctl.8 b/sbin/pfctl/pfctl.8 new file mode 100644 index 00000000000..4844c7c2b32 --- /dev/null +++ b/sbin/pfctl/pfctl.8 @@ -0,0 +1,100 @@ +.\" $OpenBSD: pfctl.8,v 1.1 2001/06/25 16:12:33 kjell Exp $ +.\" +.\" Copyright (c) 2001 Kjell Wooding. All rights reserved. +.\" +.\" Redistribution and use in source and binary forms, with or without +.\" modification, are permitted provided that the following conditions +.\" are met: +.\" 1. Redistributions of source code must retain the above copyright +.\" notice, this list of conditions and the following disclaimer. +.\" 2. Redistributions in binary form must reproduce the above copyright +.\" notice, this list of conditions and the following disclaimer in the +.\" documentation and/or other materials provided with the distribution. +.\" 3. All advertising materials mentioning features or use of this software +.\" must display the following acknowledgement: +.\" This product includes software developed by Ericsson Radio Systems. +.\" 4. The name of the author may not be used to endorse or promote products +.\" derived from this software without specific prior written permission. +.\" +.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR +.\" IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES +.\" OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. +.\" IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, +.\" INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT +.\" NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, +.\" DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY +.\" THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT +.\" (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF +.\" THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. +.\" +.Dd June 24, 2001 +.Dt PFCTL 8 +.Os +.Sh NAME +.Nm pfctl +.Nd control the packet filter and NAT subsystems +.Sh SYNOPSIS +.Nm +.Ar commands +.Sh DESCRIPTION +The +.Nm +utility communicates with the packet filter system using the +ioctl interface described in +.Xr pf 4 +.Pp +The +.Nm +utility provides several commands: +.Pp +.Bl -tag -width "parse" -compact +.It Cm start +Start the packet filter. +.It Cm stop +Stop the packet filter. +.It Cm show +.Bl -tag -width "status" -compact +.It Cm rules +Show filter rules +.It Cm nat +Show NAT rules +.It Cm states Op proto +Show active states, optionally for a particular protocol +.It Cm status +Filter status +.El +.It Cm clear +.Bl -tag -width "rules" -compact +.It Cm rules +Clear filter rules +.It Cm nat +Clear NAT rules +.El +.It Cm parse +.Bl -tag -width "wules" -compact +.It Cm rules Pa filename +Test the syntax of a rules file +.It Cm nat Pa filename +Test the syntax of a NAT file +.El +.It Cm load +.Bl -tag -width "rules" -compact +.It Cm rules Pa filename +Load rules into the filter +.It Cm nat +Load rules into NAT +.El +.It Cm log Ar if +Enable logging for an interface +.El +.Pp +.Sh BUGS +Yes +.Sh FILES +.Bl -tag -width /etc/nat.rules +.It Pa /etc/pf.rules +packet filter rules file +.It Pa /etc/nat.rules +rules for Network Address Translation +.Sh SEE ALSO +.Xr pf 4 |