The branch main has been updated by kp: URL: https://cgit.FreeBSD.org/src/commit/?id=398ca30cb6d6cb6f0f5433fae11d07a65a9259dd
commit 398ca30cb6d6cb6f0f5433fae11d07a65a9259dd Author: Kristof Provost <[email protected]> AuthorDate: 2026-01-10 09:43:09 +0000 Commit: Kristof Provost <[email protected]> CommitDate: 2026-01-14 06:44:39 +0000 pfctl.8: mention -k source -k <IP> Sponsored by: Rubicon Communications, LLC ("Netgate") --- sbin/pfctl/pfctl.8 | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/sbin/pfctl/pfctl.8 b/sbin/pfctl/pfctl.8 index 45cfd88ef039..662f5a4b0f16 100644 --- a/sbin/pfctl/pfctl.8 +++ b/sbin/pfctl/pfctl.8 @@ -43,7 +43,7 @@ .Op Fl K Ar host | network .Xo .Oo Fl k -.Ar host | network | label | id | gateway | nat +.Ar host | network | label | id | gateway | source | nat .Oc Xc .Op Fl o Ar level .Op Fl p Ar device @@ -281,7 +281,7 @@ option may be specified, which will kill all the source tracking entries from the first host/network to the second. .It Xo .Fl k -.Ar host | network | label | id | key | gateway | nat +.Ar host | network | label | id | key | gateway | source | nat .Xc Kill all of the state entries matching the specified .Ar host , @@ -290,6 +290,7 @@ Kill all of the state entries matching the specified .Ar id , .Ar key , .Ar gateway, +.Ar source , or .Ar nat. .Pp @@ -374,6 +375,10 @@ States can also be killed based on their pre-NAT address: .Pp .Dl # pfctl -k nat -k 192.168.0.1 .Pp +To remove a source from a source limiter use: +.Pp +.Dl # pfctl -I 1 -k source -k 192.0.2.2 +.Pp .It Fl M Kill matching states in the opposite direction (on other interfaces) when killing states.
