pushfilter(1M)

pushfilter -- load or unload a packet filter

Synopsis

pushfilter -d [-i interface] [-p protocol] [-I filter_tag] [-O filter_tag]
pushfilter -i interface -p protocol [-I filter_tag] [-O filter_tag]
pushfilter -i interface -p protocol -u in|out|both

Description

pushfilter loads or unloads a filter definition on an MDI network driver interface.

pushfilter understands the following options:

-d: Display the byte codes of the filters that are applied to an interface.
-I filter_tag: Specify a filter to be applied to the incoming stream of an interface.
-O filter_tag: Specify a filter to be applied to the outgoing stream of an interface.
-i interface: Specify the interface on which a filter will be loaded or from which it will be unloaded.
-p protocol: Specify the protocol to which a filter will be applied. At present, only the Internet Protocol version 4, IP, is supported.
-u in|out|both: Unload the incoming filter (in), outgoing filter (out), or both incoming and outgoing filters (both) from an interface.

Files

/etc/pf.d/IP/.saps: SAP types for which filters can be pushed
/etc/pf.d/IP/default: sample filters
/etc/pf.d/IP/interface: filters that are specific to a LAN interface
/etc/pf.d/IP/ppp: filters for PPP interfaces

Exit codes

pushfilter returns 0 on success. If an error occurs, it returns a non-zero value.

References

filter(4)