======
TABLES
======

the Contents of Tables

Aliases and other similar list of addresses are stored in a pf structure called a Table. These tables can be some what static, as with the bogons list or aliases, or dynamic for things like snort or IPs exceeding connection limits. The contents of these tables can be viewed at **Diagnostics Tables**. On that page, you select the desired table from the Table drop-down, and the contents are shown. Tables may contain both IPv4 and IPv6 addresses, and the appropriate addresses are used based on the rules in which the tables are referenced.


.. image:: ./table/imagetables.png
        :scale: 100%

Individual entries may be removed by clicking the **pluse** at the end of their row. Be aware though that tables which are defined manually or by a file will be refreshed when the system performs a filter reload, so it’s best to edit an alias and remove an entry rather than removing it from here. Removing entries is best used for dynamic tables like snort2c (Where blocked offenders from Snort go) or virusprot (where limit exceeders go) so you can clear an entry out before it automatically expires.

If you have any interface with Block Bogon Networks configured, the bogons and bogonsv6 tables will show in this
list. Along with the contents, there is a Download button that will immediately re-fetch the bogons data rather than waiting for the usual monthly update.

When using automatic outbound NAT, the tonatsubnets table shows you the list of networks for which automatic
outbound NAT is being performed. It can be handy to look at to confirm tricky NAT issues to confirm that a specific subnet is getting automatic outbound NAT applied.

If you use hostnames in aliases so that they are populated from DNS, viewing the resulting table here also lets you confirm what IPs are actually in the table.