From e6381a3c2293a9e161e7d98dabea66c49ced7f1f Mon Sep 17 00:00:00 2001 From: Victor Julien Date: Thu, 26 Mar 2026 10:42:29 +0100 Subject: [PATCH] doc/userguide: add note on rule reloads Cannot be combined with --firewall-rules-exclusive --- doc/userguide/firewall/firewall-design.rst | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/doc/userguide/firewall/firewall-design.rst b/doc/userguide/firewall/firewall-design.rst index 7644653e0f..5397ae4196 100644 --- a/doc/userguide/firewall/firewall-design.rst +++ b/doc/userguide/firewall/firewall-design.rst @@ -259,7 +259,8 @@ Firewall rules are loaded first and separately from the following section of ``s - fw.rules One can optionally, also load firewall rules exclusively from commandline using the -``--firewall-rules-exclusive`` option. +``--firewall-rules-exclusive`` option. Note that this option blocks hot rule reloads, just like +the ``-S`` option in thread detection rules. Firewall rules are available in the file ``firewall.json`` as a part of the output of :ref:`engine analysis`.