opnsense-src/share/man
Thomas Steen Rasmussen fae2a8cad3 pf: fallback if $pf_rules fails to load
Support loading a default pf ruleset in case of invalid pf.conf.

If no pf rules are loaded pf will pass/allow all traffic, assuming the
kernel is compiled without PF_DEFAULT_TO_DROP, as is the case in
GENERIC.

In other words: if there's a typo in the main pf_rules we would allow
all traffic. The new default rules minimise the impact of this.

If $pf_program (i.e. pfctl) fails to set $pf_fules and
$pf_fallback_rules_enable is YES we will load $pf_fallback_rules_file if
set, or $pf_fallback_rules.

$pf_fallback_rules can include multiple rules, for example to permit
traffic on a management interface.

$pf_fallback_rules_enable defaults to "NO", preserving historic behaviour.

man page changes by ceri@.

PR:		256410
Reviewed by:	donner, kp
Sponsored by:	semaphor.dk
Differential Revision:	https://reviews.freebsd.org/D30791

(cherry picked from commit 28f47a199c)
2022-01-24 21:11:02 +01:00
..
man1 pkgbase: move man pages from runtime-manual to runtime 2019-07-19 15:12:20 +00:00
man3 pthread_np.3: Add a manpage summarizing all of the pthread extensions. 2021-10-26 13:59:28 -07:00
man3lua flua: Add a libjail module 2020-10-24 17:08:59 +00:00
man4 nvme: Only reset once on attach. 2022-01-20 21:07:31 -05:00
man5 pf: fallback if $pf_rules fails to load 2022-01-24 21:11:02 +01:00
man6 pkgbase: move man pages from runtime-manual to runtime 2019-07-19 15:12:20 +00:00
man7 arch.7: update applicable FreeBSD versions to 12.0 and later 2021-12-20 11:14:33 -05:00
man8 uefi(8): loader.efi does not search for loader.efi 2021-12-05 10:26:33 -08:00
man9 zone.9: Remove documentation of non-existent NUMA configuration flags 2022-01-21 10:58:11 -05:00
Makefile flua: Add a libjail module 2020-10-24 17:08:59 +00:00