diff options
author | mlaier <mlaier@FreeBSD.org> | 2004-03-23 22:30:15 +0000 |
---|---|---|
committer | mlaier <mlaier@FreeBSD.org> | 2004-03-23 22:30:15 +0000 |
commit | a1442efbd3a92a0065dcfbb30e6b3fea289f78ae (patch) | |
tree | 04dc9e09454c4ddfe2ad509775cdc511e157ad67 /share/man/man5 | |
parent | c92c2d6926b1957433d010a9d32ff510b02b8fa2 (diff) | |
download | FreeBSD-src-a1442efbd3a92a0065dcfbb30e6b3fea289f78ae.zip FreeBSD-src-a1442efbd3a92a0065dcfbb30e6b3fea289f78ae.tar.gz |
Add rc.d script for pf(4) (more to come once pflogd(8) works as well).
Update defaults and write some lines for rc.conf(5) also.
Mostly dup'ed from ipf
Reviewed by: -current
Approved by: bms(mentor)
Diffstat (limited to 'share/man/man5')
-rw-r--r-- | share/man/man5/rc.conf.5 | 57 |
1 files changed, 57 insertions, 0 deletions
diff --git a/share/man/man5/rc.conf.5 b/share/man/man5/rc.conf.5 index 658f1d2..7f7c695 100644 --- a/share/man/man5/rc.conf.5 +++ b/share/man/man5/rc.conf.5 @@ -619,6 +619,63 @@ This variable contains flags passed to the .Xr ipfs 8 program. .\" ----- end of added ipf hook --------------------------------- +.It Va pf_enable +.Pq Vt bool +Set to +.Dq Li NO +by default. +Setting this to +.Dq Li YES +enables +.Xr pf 4 +packet filtering. +.Pp +Typical usage will require putting +.Bd -literal +pf_enable="YES" +.Ed +.Pp +into +.Pa /etc/rc.conf +and editing +.Pa /etc/pf.conf +appropriately. +.Pp +Having +.Bd -literal +options PFIL_HOOKS +options RANDOM_IP_ID +.Ed +.Pp +in the kernel configuration file is required for use as a +.Xr kld 4 +module. +.Pp +.Bd -literal +device pf +.Ed +.Pp +builds it into the kernel. +.It Va pf_rules +.Pq Vt str +Path to pf ruleset configuration file +(default +.Pa /etc/pf.conf ) . +.It Va pf_program +.Pq Vt str +Path to +.Xr pfctl 8 +(default +.Pa /sbin/pfctl ) . +.It Va pf_flags +.Pq Vt str +If +.Va pf_enable +is set to +.Dq Li YES , +these flags are passed to the +.Xr pfctl 8 +program when loading the ruleset. .It Va tcp_extensions .Pq Vt bool Set to |