Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

could someone please provide an example on how to add a tagged packet to a table? I have found commands to do it from the command line but can you setup a specific rule to do it inside of pf.conf?


This is all in regards to PF...

share|improve this question

I don't believe you can.

Nor do I understand why you'd need to.

Your second rule (once already tagged) would just operate on the tag rather than a table.

It might help for you to include an example of what you want to achieve.

share|improve this answer
I would like to just ban an IP that is attempting to connect to a certain port. I thought tagging might be the easiest way to achieve this, and make the rules readable because through the ruleset I could be tagging packets I would like to ban at the end. – kernelPanic Aug 10 '09 at 17:31

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.