1 1.1 degroote .Dd July 21, 2009 2 1.1 degroote .Dt PFS 8 3 1.1 degroote .Os 4 1.1 degroote .Sh NAME 5 1.1 degroote .Nm pfs 6 1.1 degroote .Nd saves and restores information for NAT and state tables. 7 1.1 degroote .Sh SYNOPSIS 8 1.1 degroote .Nm 9 1.1 degroote .Op Fl v 10 1.1 degroote .Fl l 11 1.1 degroote .Nm 12 1.1 degroote .Op Fl v 13 1.1 degroote .Fl u 14 1.1 degroote .Nm 15 1.1 degroote .Op Fl v 16 1.1 degroote .Op Fl b 17 1.1 degroote .Fl w 18 1.1 degroote .Ar filename 19 1.1 degroote .Nm 20 1.1 degroote .Op Fl v 21 1.1 degroote .Op Fl b 22 1.1 degroote .Fl r 23 1.1 degroote .Ar filename 24 1.1 degroote .Nm 25 1.1 degroote .Op Fl v 26 1.1 degroote .Op Fl b 27 1.1 degroote .Fl R 28 1.1 degroote .Ar filename 29 1.1 degroote .Nm 30 1.1 degroote .Op Fl v 31 1.1 degroote .Op Fl b 32 1.1 degroote .Fl W 33 1.1 degroote .Ar filename 34 1.1 degroote .Sh DESCRIPTION 35 1.1 degroote The 36 1.1 degroote .Nm 37 1.1 degroote command allows state information created for NAT entries and rules using 38 1.1 degroote .Pa keep state 39 1.1 degroote to be locked (modification prevented) and then saved to disk, 40 1.1 degroote allowing for the system to experience a reboot, followed by the restoration 41 1.1 degroote of that information, resulting in connections not being interrupted. 42 1.1 degroote .Sh OPTIONS 43 1.1 degroote .Bl -tag -width indent 44 1.1 degroote .It Fl b 45 1.1 degroote The information are read or stored using binary format. The default format is 46 1.1 degroote a readable ascii format, similar to 47 1.1 degroote .Pa pfctl.conf 48 1.1 degroote syntax. 49 1.1 degroote .It Fl v 50 1.1 degroote Provides a verbose description of what's being done. 51 1.1 degroote .It Fl u 52 1.1 degroote Unlock state tables in the kernel. 53 1.1 degroote .It Fl l 54 1.1 degroote Lock state tables in the kernel. 55 1.1 degroote .It Fl r 56 1.1 degroote Read information in from the specified file and load it into the 57 1.1 degroote kernel. This requires the state tables to have already been locked 58 1.1 degroote and does not change the lock once complete. 59 1.1 degroote .It Fl w 60 1.1 degroote Write information out to the specified file and from the kernel. 61 1.1 degroote This requires the state tables to have already been locked 62 1.1 degroote and does not change the lock once complete. 63 1.1 degroote .It Fl R 64 1.1 degroote Restores information in from the specified file and load it into the 65 1.1 degroote kernel. The state tables are locked at the beginning of this operation and 66 1.1 degroote unlocked once complete. 67 1.1 degroote .It Fl W 68 1.1 degroote Write information out to the specified file and from the kernel. The state 69 1.1 degroote tables are locked at the beginning of this operation and unlocked once 70 1.1 degroote complete. 71 1.1 degroote .El 72 1.1 degroote .Sh FILES 73 1.1 degroote /dev/pf 74 1.1 degroote .Sh SEE ALSO 75 1.1 degroote .Xr pf 4 76