The branch main has been updated by kp:
URL:
https://cgit.FreeBSD.org/src/commit/?id=cdf415ecfd756b61ed0fad687ee97a12ec29cb5a
commit cdf415ecfd756b61ed0fad687ee97a12ec29cb5a
Author: Kristof Provost <k...@freebsd.org>
AuthorDate: 2025-02-03 17:11:55 +0000
Commit: Kristof Provost <k...@freebsd.org>
CommitDate: 2025-02-13 12:38:42 +0000
pf.conf.5: make it clear that the default implicit 'pass' rule does not
create state
make sense to deraadt@, ok/wording tweak from mikeb.
Obtained from: OpenBSD, sthen <st...@openbsd.org>, 610eb54470
Sponsored by: Rubicon Communications, LLC ("Netgate")
---
share/man/man5/pf.conf.5 | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index 4020243c521b..5ee660bd0202 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -707,7 +707,7 @@ For each packet processed by the packet filter, the filter
rules are
evaluated in sequential order, from first to last.
The last matching rule decides what action is taken.
If no rule matches the packet, the default action is to pass
-the packet.
+the packet without creating a state.
.Pp
The following actions can be used in the filter:
.Bl -tag -width xxxx
