From nobody Wed Jan 14 08:06:02 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4drdwW1Zsjz6PL6f for ; Wed, 14 Jan 2026 08:06:03 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4drdwV6rdrz3KKK for ; Wed, 14 Jan 2026 08:06:02 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1768377963; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=En8MKrq0bcgLTxWQl7CSSQkvTz03M+IhtIZZxeu/hog=; b=fVvjlEM3S+6acy/cBKzvdQ2dIDtsOZLH28kBnz8OAFB/zzhtgF+qk+54Ap4Zc3gOjf4jUL jrqBwD0qg2TOTA+wCIhGFAOIF4DeO36B1PF06yMF2Wtn6YZwVL6dvFeZp7csJH+nPopQ/T ta3pp136tWsc2lWnzilaVg+8+FjMTkBqruZYYxKWf3PbjNvM0FyTyOjxRGbnA8+sFOrZGA nH4Axx6eR8lsKs1kxPCCoKWRvPVQfLNfp4EVhMLGLr55j5gyHj/ydyU/vmTgia0p9A0jTQ 5gDduy9u6Vb8BHioYAmGI/CDTCPqVg7tQVG/xC9u3wEkHNn/P0pbM+kJQWsYcQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1768377963; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=En8MKrq0bcgLTxWQl7CSSQkvTz03M+IhtIZZxeu/hog=; b=tu6IxOHKfF/0MZjxoZG+BZKj6Nob18m1B5xvz/mX7Q6g4T4TZGLcr2mkVL5e0KTCBGuELu Ic6zPyN2kJlswT1bkreTk+kqrp/4LsTbXgKRTNiAhDTRFRi8xObkB0Ax8FG4AIIqkeFPKW gVDFVolsQ8klNxTGWTO0uv6/Mzct5a2/I7iPgcYVm17ksqni5HqfeYlS5kGviu+/V6NakQ AvH7e9NFmPfLaHF3E8YGp6ntv8jeZE+mpTOefGpH6i/yAZhe4Vr93M/MaxXUb8WeBEGhK2 hAbvoew/EvChhsyFZz8YH4QoXiKoPUkWRswteV8HWKB1t/a9/tqiP5UIJ9ok0Q== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1768377963; a=rsa-sha256; cv=none; b=xr5amAD5mt0U3WHgLOOPsf6AvzmJW5IsXJme1zDsGawLn7VqJ+y5kWYFdydkca77nCImdk Ty2khefya9HBsiImXSPymGtg2WyF3mY2kda1qpbwKmq7qOlYMWS9/BiWTV1UvPHtVAqwQx XCcEJN7LdwWEdUXBsK29qyyeofwBwlVovAuj9qboPvugN5oj4H+Cm6rNml7FZ2B91whfOE kpuMEyxCdCThm2c8XKbfDSY1YVa4G24HKYp/GDcu4KGDakh2VQULIvvCWj0rL1KfTp5Fvi N2TsUWGiHvSUdZ4oE1PGgrPdctikLMJeHk645OSX/1vtD3eCtFZ9QbN9lhWeig== ARC-Authentication-Results: i=1; mx1.freebsd.org; none Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4drdwV67FRzqbR for ; Wed, 14 Jan 2026 08:06:02 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id b64f by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Wed, 14 Jan 2026 08:06:02 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org From: Kristof Provost Subject: git: 398ca30cb6d6 - main - pfctl.8: mention -k source -k List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: kp X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 398ca30cb6d6cb6f0f5433fae11d07a65a9259dd Auto-Submitted: auto-generated Date: Wed, 14 Jan 2026 08:06:02 +0000 Message-Id: <69674e6a.b64f.14cd10be@gitrepo.freebsd.org> The branch main has been updated by kp: URL: https://cgit.FreeBSD.org/src/commit/?id=398ca30cb6d6cb6f0f5433fae11d07a65a9259dd commit 398ca30cb6d6cb6f0f5433fae11d07a65a9259dd Author: Kristof Provost AuthorDate: 2026-01-10 09:43:09 +0000 Commit: Kristof Provost CommitDate: 2026-01-14 06:44:39 +0000 pfctl.8: mention -k source -k Sponsored by: Rubicon Communications, LLC ("Netgate") --- sbin/pfctl/pfctl.8 | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/sbin/pfctl/pfctl.8 b/sbin/pfctl/pfctl.8 index 45cfd88ef039..662f5a4b0f16 100644 --- a/sbin/pfctl/pfctl.8 +++ b/sbin/pfctl/pfctl.8 @@ -43,7 +43,7 @@ .Op Fl K Ar host | network .Xo .Oo Fl k -.Ar host | network | label | id | gateway | nat +.Ar host | network | label | id | gateway | source | nat .Oc Xc .Op Fl o Ar level .Op Fl p Ar device @@ -281,7 +281,7 @@ option may be specified, which will kill all the source tracking entries from the first host/network to the second. .It Xo .Fl k -.Ar host | network | label | id | key | gateway | nat +.Ar host | network | label | id | key | gateway | source | nat .Xc Kill all of the state entries matching the specified .Ar host , @@ -290,6 +290,7 @@ Kill all of the state entries matching the specified .Ar id , .Ar key , .Ar gateway, +.Ar source , or .Ar nat. .Pp @@ -374,6 +375,10 @@ States can also be killed based on their pre-NAT address: .Pp .Dl # pfctl -k nat -k 192.168.0.1 .Pp +To remove a source from a source limiter use: +.Pp +.Dl # pfctl -I 1 -k source -k 192.0.2.2 +.Pp .It Fl M Kill matching states in the opposite direction (on other interfaces) when killing states.