diff --git a/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml b/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml
index ab436548fb..7d8fa69d0a 100644
--- a/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml
+++ b/en_US.ISO8859-1/books/handbook/firewalls/chapter.sgml
@@ -256,16 +256,6 @@
More info can be found at the PF for &os; web site: .
- The OpenBSD PF user's guide is here: .
-
-
- PF in &os; 5.X is at the level of OpenBSD version 3.5. The
- port from the &os; Ports Collection is at the level of OpenBSD
- version 3.4. Keep that in mind when browsing the user's
- guide.
-
-
Enabling PF
@@ -283,6 +273,21 @@
was defined during the build, it also requires options
INET6.
+
+ Once the kernel module is loaded or the kernel is statically
+ built with PF support, it is possible to enable or disable
+ pf with the pfctl
+ command.
+
+ This example demonstrates how to enable
+ pf:
+
+ &prompt.root; pfctl -e
+
+ The pfctl command provides a way to work
+ with the pf firewall. It is a good
+ idea to check the &man.pfctl.8; manual page to find out more
+ information about using it.
@@ -414,6 +419,36 @@ options ALTQ_NOPCC # Required for SMP build
This option is required on SMP
systems.
+
+
+ Creating Filtering Rules
+
+ The Packet Filter reads its configuration rules from the
+ &man.pf.conf.5; file and it modifies, drops or passes packets
+ according to the rules or definitions specified there. The &os;
+ installation comes with a default
+ /etc/pf.conf which contains useful examples
+ and explanations.
+
+ Although &os; has its own /etc/pf.conf
+ the syntax is the same as one used in OpenBSD. A great
+ resource for configuring the pf
+ firewall has been written by OpenBSD team and is available at
+ .
+
+
+ When browsing the pf user's guide, please keep in mind that
+ different versions of &os; contain different versions of pf. The
+ pf firewall in &os; 5.X is at the level
+ of OpenBSD version 3.5 and in &os; 6.X is at the level of OpenBSD
+ version 3.7.
+
+
+ The &a.pf; is a good place to ask questions about
+ configuring and running the pf
+ firewall. Do not forget to check the mailing list archives
+ before asking questions.
+