From nobody Mon Apr 20 14:24:15 2026 X-Original-To: dev-commits-src-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4fznmc363Jz679fH for ; Mon, 20 Apr 2026 14:24:16 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R13" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4fznmb6jBsz40kg for ; Mon, 20 Apr 2026 14:24:15 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1776695056; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=iQC1w2bQlBmTIaEXrA5qfHW3TVegttLRlRNYDPKn26U=; b=pKOdz6MQSC/arHb0enwFxn4gBwRPnQu0s8R4vq/6ta4ycSGPJEw/MNpxAKe8MhM77iXT/+ qiUDZc7GfiTm5oUkkV85oy+sZMpZbUgxXMpG0m8cyOVwt4Uy4JYvyrNigXEB7j2WtgdzT2 DPRKq8gP5S1rpy7bUFyyroESyfEZ5WvktSy2vPPmdySOnB8kEJLgEikn0HOV9J03iHXuQ/ Q670dUT3W2rCkt1CShF1iEH/ru40DmhHNB+bENQSPOtXn5ieGpHKIMmZv5OKbkroybkq88 SLVDmsO8NthpISF6rlQf3xLCBxFthyMTadyLR4PKa0WByYwjqSnmZkqJXrzYUQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1776695056; a=rsa-sha256; cv=none; b=wkeEvEudujs/5xbkKBzTXXtxYLTJvLzES7NaoulVZK0/C07x1l83DF/eermwOkJrbKVD8D QPwD3COZkXXh9yHUKMDpvsQivrGYtk/N8C3ZC0lA3aLC2V6soSeCoFqKQfK1qiIIC+Ze8I 1o3sztTVBfgzN4PqYsmWYj1iJCwbqdCgCSeDAqz1UALBDxBzeCahlbGetC/ycsBE7q1jQT sLK5eHaK+l5EC7WPrHw7PbPDS4ErEOx271ZdEwiWPGJhlop0ceFtm94AP2JUpXPmy2OXvZ X1li+Am8J0MzW6X3jw6rKYety8igXpUu7UxGrmaYnFyipD+NviZE8HT6uajLiA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1776695056; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=iQC1w2bQlBmTIaEXrA5qfHW3TVegttLRlRNYDPKn26U=; b=RBv+cwv8VD+eykyQTSwf5BeiWcFJ/yhdQOR5RCdQjLeN5uOorG890o1Byqbccbp18rpJiM L6/Kh/4TXuUygyGgjQtfsZXPjXJyiLAx8Unb3aGWcxSfrGDTHeSilstkXEOh1avRKjtyXN BIWbXJ07yp1paciAEfxcfXNO4l+HxXtWVgjJD4uBuw9p0SHZwA96LXgR72vqSiivZ/YCZ8 KFmjkRtBdsIK3RqCPlXL+SWrmy/uoazAm1sHkvNDP//z5bb4AxeoZNqxNZset//TtGKMsN nlL4UxUNcV1qymUV36UTm64JvoBzmKwPMnAE1+xYxw4wZ9Iz65Yl6GPdpQivqg== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4fznmb5vxPz11dh for ; Mon, 20 Apr 2026 14:24:15 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 23acb by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Mon, 20 Apr 2026 14:24:15 +0000 To: src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-main@FreeBSD.org Cc: Ross Williams From: Kristof Provost Subject: git: 19eecf94fa16 - main - pfctl: clarify usage of load option flags List-Id: Commit messages for all branches of the src repository List-Archive: https://lists.freebsd.org/archives/dev-commits-src-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-src-all@freebsd.org Sender: owner-dev-commits-src-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: kp X-Git-Repository: src X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 19eecf94fa16aac6f90a4610d2f342f70060674a Auto-Submitted: auto-generated Date: Mon, 20 Apr 2026 14:24:15 +0000 Message-Id: <69e6370f.23acb.70681189@gitrepo.freebsd.org> The branch main has been updated by kp: URL: https://cgit.FreeBSD.org/src/commit/?id=19eecf94fa16aac6f90a4610d2f342f70060674a commit 19eecf94fa16aac6f90a4610d2f342f70060674a Author: Ross Williams AuthorDate: 2026-04-17 15:19:23 +0000 Commit: Kristof Provost CommitDate: 2026-04-20 12:50:40 +0000 pfctl: clarify usage of load option flags `pfctl -A`, `-N`, `-O`, and `-R` restrict which rule types and options are loaded. The man page language ("Load only...") does not make it clear that these options can be combined to (re)load multiple rule types and/or options without reloading the entire packet filter. Add language to make it explicitly clear that these flags combine. Reviewed by: kp Signed-off-by: Ross Williams --- sbin/pfctl/pfctl.8 | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/sbin/pfctl/pfctl.8 b/sbin/pfctl/pfctl.8 index 05a76641ca8d..53f2c369108f 100644 --- a/sbin/pfctl/pfctl.8 +++ b/sbin/pfctl/pfctl.8 @@ -110,6 +110,12 @@ The options are as follows: .It Fl A Load only the queue rules present in the rule file. Other rules and options are ignored. +Can be combined with the +.Fl N , +.Fl O , +and +.Fl R +flags to load multiple rule types without (re)loading all rules. .It Fl a Ar anchor Apply flags .Fl f , @@ -399,11 +405,23 @@ Allows single options to be modified without disturbing the others: .It Fl N Load only the NAT rules present in the rule file. Other rules and options are ignored. +Can be combined with the +.Fl A , +.Fl O , +and +.Fl R +flags to load multiple rule types without (re)loading all rules. .It Fl n Do not actually load rules, just parse them. .It Fl O Load only the options present in the rule file. Other rules and options are ignored. +Can be combined with the +.Fl A , +.Fl N , +and +.Fl R +flags to load multiple rule types without (re)loading all rules. .It Fl o Ar level Control the ruleset optimizer, overriding any rule file settings. .Pp @@ -432,6 +450,12 @@ Only print errors and warnings. .It Fl R Load only the filter rules present in the rule file. Other rules and options are ignored. +Can be combined with the +.Fl A , +.Fl N , +and +.Fl O +flags to load multiple rule types without (re)loading all rules. .It Fl r Perform reverse DNS lookups on states and tables when displaying them. .Fl N