pfilctl(8) · carta

Usage

pfilctl heads

pfilctl hooks

pfilctl {link ⟨-i | -o⟩ [-a] hook head}

pfilctl {unlink ⟨-i | -o⟩ hook head}

The pfilctl utility is intended to view and change configuration of the pfil(9) packet filtering hooks and filters on them.

heads: List available packet filtering points.
hooks: List available packet filters.
: link ⟨-i | -o⟩ [-a] hook head Link hook to head. With the -i flag the hook will be connected as input and with -o as output hook. At least one of -i or -o is required. By default pfilctl will prepend the hook in front of other hooks if any present: new hook will be as close to the wire as possible, so that on input it will be the first filter and on output it will be the last. Adding the -a flag switches to appending new hook instead of prepending.
: unlink ⟨-i | -o⟩ hook head Unlink hook on head. At least one of -i or -o is required. With the -i flag the hook will be removed from the input list of hooks and with -o on output list.

15 releases since FreeBSD 13.0-RELEASE; the text changed 1 time.