equivalent of "-E" option to pfctl?

[bryanlarsen]

I'm looking at converting a pfctl script using this crate, but I don't see an equivalent for the "-E" option to pfctl. It seems more polite / more compatible with other tools to use the -E/-X options rather than -e/-d.

[pronebird]

It would be great to add but that would require us digging into ioctl calls. How do you use -E? Does it return a token over stdout that you can later release with -X to disable firewall given no one else wants it enabled?

[issackelly]

That's exactly how we (I work with OP) use -E

We are back to touching this part of our code so I was looking at this recently. If I get a patch together I'll put it here.