diff --git a/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml b/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml index ab436548fb..7d8fa69d0a 100644 --- a/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml +++ b/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml @@ -256,16 +256,6 @@ More info can be found at the PF for &os; web site: . - The OpenBSD PF user's guide is here: . - - - PF in &os; 5.X is at the level of OpenBSD version 3.5. The - port from the &os; Ports Collection is at the level of OpenBSD - version 3.4. Keep that in mind when browsing the user's - guide. - - Enabling PF @@ -283,6 +273,21 @@ was defined during the build, it also requires options INET6. + + Once the kernel module is loaded or the kernel is statically + built with PF support, it is possible to enable or disable + pf with the pfctl + command. + + This example demonstrates how to enable + pf: + + &prompt.root; pfctl -e + + The pfctl command provides a way to work + with the pf firewall. It is a good + idea to check the &man.pfctl.8; manual page to find out more + information about using it. @@ -414,6 +419,36 @@ options ALTQ_NOPCC # Required for SMP build This option is required on SMP systems. + + + Creating Filtering Rules + + The Packet Filter reads its configuration rules from the + &man.pf.conf.5; file and it modifies, drops or passes packets + according to the rules or definitions specified there. The &os; + installation comes with a default + /etc/pf.conf which contains useful examples + and explanations. + + Although &os; has its own /etc/pf.conf + the syntax is the same as one used in OpenBSD. A great + resource for configuring the pf + firewall has been written by OpenBSD team and is available at + . + + + When browsing the pf user's guide, please keep in mind that + different versions of &os; contain different versions of pf. The + pf firewall in &os; 5.X is at the level + of OpenBSD version 3.5 and in &os; 6.X is at the level of OpenBSD + version 3.7. + + + The &a.pf; is a good place to ask questions about + configuring and running the pf + firewall. Do not forget to check the mailing list archives + before asking questions. +