FreeBSD Manual Pages
PFTABLED(1) FreeBSD General Commands Manual PFTABLED(1) NAME pftabled - Remote PF table helper SYNOPSIS pftabled [-a address] [-d] [-f table] [-k keyfile] [-p port] [-t timeout] [-v] [table] DESCRIPTION The pftabled daemon is a small helper to make your pf(4) ta- bles reachable from other hosts. The options are as follows: -a address Bind to this address (default: 0.0.0.0). -d Run as daemon in the background and log to sys- tem logfiles. Defaults to run in the foreground and log to standard error. -f table Force client requests to use this table. Ig- nores client supplied table name. -k keyfile Read authentication key from keyfile. Needs to be at least 20 bytes large. -p port Bind to this port (default: 56789). -t timeout Delete addresses from table after timeout sec- onds. With this option enabled pftabled needs more memory (ap- prox. 16 bytes per active address). -v Log all received commands. AUTHENTICATION Client requests are authenticated by a HMAC-SHA1 keyed hash. A secret keyfile with at least 20 bytes of key material is needed. It may be generated from random data by # dd if=/dev/arandom of=/etc/pftabled.key bs=20 count=1 # chmod 0400 /etc/pftabled.key and distributed securely (see scp(1)) to the participating hosts. Securing the receiving port by adequate pf(4) rules is still recommended. WIRE FORMAT The pftabled daemon accepts UDP datagrams of the following format: +---------+---------+---------+---------+ | Version | Command | Reserved| Netmask | +---------+---------+---------+---------+ | IPv4 address | +---------+---------+---------+---------+ | | : Table name (32 bytes) : | | +---------+---------+---------+---------+ | Timestamp | +---------+---------+---------+---------+ | | : Signature (20 bytes) : | | +---------+---------+---------+---------+ With the following commands: 0x01 Add address to table. 0x02 Delete address from table. 0x03 Flush table. SEE ALSO pf(4), pf.conf(5) VERSION This manual page describes pftabled version 1.08. AUTHORS Armin Wolfermann <armin@wolfermann.org> LOCAL February 4, 2009 LOCAL
NAME | SYNOPSIS | DESCRIPTION | AUTHENTICATION | WIRE FORMAT | SEE ALSO | VERSION | AUTHORS
Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=pftabled&sektion=1&manpath=FreeBSD+Ports+14.3.quarterly>