1/* 2 * SPDX-License-Identifier: ISC 3 * 4 * Copyright (c) 2025 Lexi Winter <ivy@FreeBSD.org> 5 * 6 * Permission to use, copy, modify, and distribute this software for any 7 * purpose with or without fee is hereby granted, provided that the above 8 * copyright notice and this permission notice appear in all copies. 9 * 10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR 13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 17 */ 18 19comment = "OpenBSD packet filter" 20 21desc = <<EOD 22pf is an advanced stateful packet filter developed by the OpenBSD project. 23In addition to basic packet filtering, pf supports connection redirection, 24Network Address Translation (NAT), traffic normalisation, synchronisation 25of filter state between hosts (for redundant failover), and queueing via 26altq(9) or dummynet(4). This version of pf also supports basic layer 2 27Ethernet filtering. 28 29This package provides the pfctl(8) configuration utility used to monitor and 30change the pf configuration, as well as rc(8) scripts to configure pf during 31system startup, and a periodic(8) script to report connections denied by pf. 32 33Several example pf rulesets are also provided in /usr/share/examples/pf. 34EOD 35 36annotations { 37 set = "optional,optional-jail" 38} 39