0375d06035
pfctl only takes the last '-F' argument into account, so this never did what was intended. Moreover, there is no reason to flush rules before reloading, because pf keeps track of the rule which created a given state. That means that existing connections will keep being processed according to the rule which originally created them. Simply reloading the (new) rules suffices. The new rules will apply to new connections. PR: 127814 Submitted by: Andreas Longwitz <longwitz at incore.de> MFC after: 3 weeks |
||
---|---|---|
.. | ||
autofs | ||
bluetooth | ||
cron.d | ||
defaults | ||
devd | ||
etc.aarch64 | ||
etc.amd64 | ||
etc.arm | ||
etc.i386 | ||
etc.mips | ||
etc.powerpc | ||
etc.riscv | ||
etc.sparc64 | ||
gss | ||
mtree | ||
newsyslog.conf.d | ||
ntp | ||
pam.d | ||
periodic | ||
pkg | ||
rc.d | ||
root | ||
sendmail | ||
syslog.d | ||
amd.map | ||
apmd.conf | ||
auto_master | ||
blacklistd.conf | ||
crontab | ||
csh.cshrc | ||
csh.login | ||
csh.logout | ||
ddb.conf | ||
devd.conf | ||
devfs.conf | ||
dhclient.conf | ||
disktab | ||
fbtab | ||
freebsd-update.conf | ||
ftpusers | ||
gettytab | ||
group | ||
hosts | ||
hosts.allow | ||
hosts.equiv | ||
hosts.lpd | ||
inetd.conf | ||
libalias.conf | ||
libmap.conf | ||
login.access | ||
login.conf | ||
mac.conf | ||
Makefile | ||
Makefile.depend | ||
master.passwd | ||
minfree | ||
motd | ||
netconfig | ||
netstart | ||
network.subr | ||
networks | ||
newsyslog.conf | ||
nls.alias | ||
nscd.conf | ||
nsmb.conf | ||
nsswitch.conf | ||
ntp.conf | ||
opieaccess | ||
pccard_ether | ||
pf.os | ||
phones | ||
portsnap.conf | ||
printcap | ||
profile | ||
protocols | ||
rc | ||
rc.bsdextended | ||
rc.firewall | ||
rc.initdiskless | ||
rc.resume | ||
rc.sendmail | ||
rc.shutdown | ||
rc.subr | ||
rc.suspend | ||
regdomain.xml | ||
remote | ||
rpc | ||
services | ||
shells | ||
snmpd.config | ||
sysctl.conf | ||
syslog.conf | ||
termcap.small |