summaryrefslogtreecommitdiff
path: root/sbin/pfctl/parse.y
AgeCommit message (Expand)Author
2021-10-15Don't declare variables as "unsigned char *" that are passed toChristian Weisgerber
2021-02-01change route-to so it sends packets to IPs instead of interfaces.David Gwynne
2021-01-12Sometimes a user ID was logged in pflog(4) although the logopt ofAlexander Bluhm
2020-12-16Fail to parse rules with invalid rangeskn
2020-12-16Reject rules with invalid port rangeskn
2020-12-07synproxy should be processing incoming SYN packets only.Alexandr Nedvedicky
2020-10-01rdomain IDs do not need to exist for "on rdomain N" to workkn
2020-09-17Fix the previous commit whose conditions were reversed.YASUOKA Masahiko
2020-09-17Make pfctl(8) check if the rtable really exists when parsing theYASUOKA Masahiko
2020-01-28sbin/pfctl: replace TAILQ concatenation loop with TAILQ_CONCATbket
2020-01-15Do the actual pfr_strerror() to pf_strerror() renamekn
2019-10-17Use -1 to indicate an invalid uid/gid, not UID_MAX and GID_MAX.Todd C. Miller
2019-08-26Fix file descriptor leak due to popfile() never closing the main config file.tobhe
2019-07-05Fix integer sizes in format strings and enable formatting warningsPatrick Wildt
2019-05-08pfctl should check pfctl.astack is not overrunAlexandr Nedvedicky
2019-04-18Fix table definition parsing as unprivileged userkn
2019-03-06Fix once ruleskn
2019-02-13(unsigned) means (unsigned int) which on ptrdiff_t or size_t or otherTheo de Raadt
2019-02-10Anchor names must not be emptykn
2019-02-10Unify anchor name sanity checkskn
2019-01-31Make divert-packet port accept any port specificationkn
2019-01-11When creating tables inside anchors, pfctl warned about namespacekn
2018-11-15scrub opts dont set tos, so remove it from the scrub_opts structDavid Gwynne
2018-11-10Unbreak `-D macro=value' (r1.686 regression)kn
2018-11-07sync cmdline_symset() changes with src/usr.sbin; OK sashan@ claudio@miko
2018-11-01- odd condition/test in PF lexerAlexandr Nedvedicky
2018-09-16Use uid_from_user(3) and gid_from_group(3) in utilities thatTodd C. Miller
2018-09-06Remove unused af argument from unmask()kn
2018-07-16reduce duplicate code, fix typo/free correct bufferkn
2018-07-13Fix regression on child queue definitionskn
2018-07-11Prevent invalid interface specifiers on queue ruleskn
2018-07-11Do for most running out of memory err() what was done for most runningKenneth R Westerback
2018-07-10'set delay' for the generic packet delay mechanism, ok benno sashanHenning Brauer
2018-07-10fix anchor rules with filter opts, introduce filteropts_to_rule()kn
2018-07-09Zap dead codekn
2018-07-09No need to mention which memory allocation entry point failed (malloc,Kenneth R Westerback
2018-07-08Be consistent in warn() and log_warn() usage whenKenneth R Westerback
2018-05-18A pf rule with a "on rdomain n" with nonexisting rdomain n will cause anSebastian Benoit
2018-05-09Fix (include file ) line number counting by keeping track of the ungetOtto Moerbeek
2018-04-26Plug leak in error case of the common 'varset' implementations.Kenneth R Westerback
2018-02-08make the watermarks/thresholds for entering and leaving syncookie mode whenHenning Brauer
2018-02-06allow control over syncookies: set syncookies never/always/adaptiveHenning Brauer
2017-11-28The divert structure was using the port number to indicate thatAlexander Bluhm
2017-11-27The divert structure was using the port number to indicate thatAlexander Bluhm
2017-11-25- pfctl fails to handle nested 'load anchor' properlyAlexandr Nedvedicky
2017-11-14- nested anchors vs. pfctl/parse.yAlexandr Nedvedicky
2017-11-13add a generic packet rate matching filter. allows things likeHenning Brauer
2017-08-11add option -N (no domain resolution)Sebastian Benoit
2017-07-19Allow HFSC classes to use flow queuesMike Belopuhov
2017-07-19Rework HFSC vs FQ-CoDel checksMike Belopuhov