Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've noticed that both FreeBSD and NetBSD have extra pfctl options: pfctl [-AdeghmNnOPqRrvz]

But OpenBSD doesn't, it's missing around five of the extra options: pfctl [-deghnPqrvz]

I would have thought that as pf is from OpenBSD that it would have these options too. Does anyone know why it doesn't, or how to get them?

share|improve this question
up vote 3 down vote accepted

The "extra" options were deprecated by OpenBSD over 9 years ago and removed in pfctl revision 1.143 (Mar 23, 2010) with the following comments:

remove -A, -O, -R and -T load the partial loading of a ruleset (leaving ancors aside) is wrong and conflicts with the general idea of how pf works. last not least it breaks with the optimizer generating tables automagically.

You could conceivably graft the functionality back into a current copy of pfctl, but that'd be "fun"...

share|improve this answer
Thanks for the answer. That's a shame, I thought the extra functionality was useful. – Jak May 29 '13 at 7:55

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.