{"id":92,"date":"2008-04-28T06:52:43","date_gmt":"2008-04-28T04:52:43","guid":{"rendered":"http:\/\/www.shukko.com\/x3\/2008\/04\/28\/basic-pfctl-control\/"},"modified":"2008-04-28T06:52:43","modified_gmt":"2008-04-28T04:52:43","slug":"basic-pfctl-control","status":"publish","type":"post","link":"https:\/\/www.shukko.com\/x3\/2008\/04\/28\/basic-pfctl-control\/","title":{"rendered":"basic pfctl control"},"content":{"rendered":"


\n# basic pfctl control
\n# ==
\n# This document: http:\/\/www.rdrs.net\/document\/
\n# Related: http:\/\/www.OpenBSD.org
\n# Last update: Tue Dec 28, 2004
\n# ==
\n# Note:
\n# this document is only provided as a basic overview
\n# for some common pfctl commands and is by no means
\n# a replacement for the pfctl and pf manual pages.<\/p>\n

#### General PFCTL Commands ####
\n# pfctl -d disable packet-filtering
\n# pfctl -e enable packet-filtering
\n# pfctl -q run quiet
\n# pfctl -v -v run even more verbose<\/p>\n

#### Loading PF Rules ####
\n# pfctl -f \/etc\/pf.conf load \/etc\/pf.conf
\n# pfctl -n -f \/etc\/pf.conf parse \/etc\/pf.conf, but dont load it
\n# pfctl -R -f \/etc\/pf.conf load only the FILTER rules
\n# pfctl -N -f \/etc\/pf.conf load only the NAT rules
\n# pfctl -O -f \/etc\/pf.conf load only the OPTION rules<\/p>\n

#### Clearing PF Rules & Counters ####
\n# pfctl -F all flush ALL
\n# pfctl -F rules flush only the RULES
\n# pfctl -F queue flush only queue's
\n# pfctl -F nat flush only NAT
\n# pfctl -F info flush all stats that are not part of any rule.
\n# pfctl -z clear all counters
\n# note: flushing rules do not touch any existing stateful connections<\/p>\n

#### Output PF Information ####
\n# pfctl -s rules show filter information
\n# pfctl -v -s rules show filter information for what FILTER rules hit..
\n# pfctl -vvsr show filter information as above and prepend rule numbers
\n# pfctl -v -s nat show NAT information, for which NAT rules hit..
\n# pfctl -s nat -i xl1 show NAT information for interface xl1
\n# pfctl -s queue show QUEUE information
\n# pfctl -s label show LABEL information
\n# pfctl -s state show contents of the STATE table
\n# pfctl -s info show statistics for state tables and packet normalization
\n# pfctl -s all show everything<\/p>\n

#### Maintaining PF Tables ####
\n# pfctl -t addvhosts -T show show table addvhosts
\n# pfctl -vvsTables view global information about all tables
\n# pfctl -t addvhosts -T add 192.168.1.50 add entry to table addvhosts
\n# pfctl -t addvhosts -T add 192.168.1.0\/16 add a network to table addvhosts
\n# pfctl -t addvhosts -T delete 192.168.1.0\/16 delete nework from table addvhosts
\n# pfctl -t addvhosts -T flush remove all entries from table addvhosts
\n# pfctl -t addvhosts -T kill delete table addvhosts entirely
\n# pfctl -t addvhosts -T replace -f \/etc\/addvhosts reload table addvhosts on the fly
\n# pfctl -t addvhosts -T test 192.168.1.40 find ip address 192.168.1.40 in table addvhosts
\n# pfctl -T load -f \/etc\/pf.conf load a new table definition
\n# pfctl -t addvhosts -T show -v output stats for each ip address in table addvhosts
\n# pfctl -t addvhosts -T zero reset all counters for table addvhosts <\/p>\n

<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"

# basic pfctl control # == # This document: http:\/\/www.rdrs.net\/document\/ # Related: http:\/\/www.OpenBSD.org # Last update: Tue Dec 28, 2004 # == # Note: # this document is only provided as a basic overview # for some common pfctl commands and is by no means # a replacement for the pfctl and pf manual pages. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[48],"tags":[],"class_list":["post-92","post","type-post","status-publish","format-standard","hentry","category-ivir-zivir"],"_links":{"self":[{"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/posts\/92","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/comments?post=92"}],"version-history":[{"count":0,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/posts\/92\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/media?parent=92"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/categories?post=92"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.shukko.com\/x3\/wp-json\/wp\/v2\/tags?post=92"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}