Skip to content

add some features #4

@fbion

Description

@fbion

packet filter info states

Add kill function after each line of connection
we can use pfctl -k to kill some state

Of course, it is also possible to add a one-key block function to each connection

-K host | network
Kill all of the source tracking entries originating from the specified host
or network. A second -K host or -K network option may be specified, which
will kill all the source tracking entries from the first host/network to the
second.

-k host | network
Kill all of the state entries originating from the specified host or network.
A second -k host or -k network option may be specified, which will kill all
the state entries from the first host/network to the second. For example, to
kill all of the state entries originating from ``host'':

               # pfctl -k host

         To kill all of the state entries from ``host1'' to ``host2'':

               # pfctl -k host1 -k host2

         To kill all states originating from 192.168.1.0/24 to 172.16.0.0/16:

               # pfctl -k 192.168.1.0/24 -k 172.16.0.0/16

         A network prefix length of 0 can be used as a wildcard.  To kill all states
         with the target ``host2'':

               # pfctl -k 0.0.0.0/0 -k host2

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions