summaryrefslogtreecommitdiff
path: root/sbin/pfctl/parse.y
AgeCommit message (Expand)Author
2003-01-07Remove table name hashing (pass the name in each ioctl instead), andDaniel Hartmeier
2003-01-06Fix some oversights with address pools for route-to/dup-to/reply-toRyan Thomas McBride
2003-01-05err after calloc failure, not errxHenning Brauer
2003-01-05Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for tableDaniel Hartmeier
2003-01-04move noroute from flag in pf_rule_addr into type in pf_addr_wrap.Daniel Hartmeier
2003-01-04I do not know where this policy of "one .h file for every .c file" comesTheo de Raadt
2003-01-03whitespace KNF (no, i don't touch the option inits)Daniel Hartmeier
2003-01-03Bring in userland code for accessing PF radix tables.Cedric Berger
2003-01-02Require a direction to be specified for rules which do routing.Ryan Thomas McBride
2002-12-30Change ipv6-icmp-type to icpm6-type. pf.conf files will need to be adjustedRyan Thomas McBride
2002-12-27Since pf_norm.c looks at rule.log to see if it should log packets beingRyan Thomas McBride
2002-12-21always initialize rpool.key; diff from Frank Denis; KNF by meHenning Brauer
2002-12-21KNFHenning Brauer
2002-12-20remove a redundant assignment.Daniel Hartmeier
2002-12-19fix 'no rdr'.Daniel Hartmeier
2002-12-18more KNFHenning Brauer
2002-12-18proto list expansion is not supported in binat-anchor yet, print an errorDaniel Hartmeier
2002-12-18Support (single) destination port in rdr-anchor rules. Print an errorDaniel Hartmeier
2002-12-18fix some INCREDIBLE new bugs which were introducedTheo de Raadt
2002-12-17add support for the PRIQ schedulerHenning Brauer
2002-12-17Match merge of pf_nat/pf_binat/pf_rdr structs into pf_ruleRyan Thomas McBride
2002-12-17missing break in switchHenning Brauer
2002-12-17beautify the %type blockHenning Brauer
2002-12-17PRIQ and HFSC support functions, not yet used.Henning Brauer
2002-12-16only create a root queue if scheduler = cbqHenning Brauer
2002-12-16get full [scheduler]_opts struct instead of just .flags, and wrap in into aHenning Brauer
2002-12-13allow a second queue for higher priorized (currently: tos=lowdelay) packetsHenning Brauer
2002-12-13a bit KNF originally part of another diff soon to come; frantzen@ correctlyHenning Brauer
2002-12-13permit re-ordering of some scrub parameters, and also clean up some otherTheo de Raadt
2002-12-12KNFHenning Brauer
2002-12-12we don't need to keep a private copy of the queue name in expand_rule,Henning Brauer
2002-12-11Replace strncpy + ugly pointer math with sscanif for reading source-hash keysRyan Thomas McBride
2002-12-09(properly guarded) strcpy() -> strlcpy()Daniel Hartmeier
2002-12-09do not allow redefinitions in variable option blocks; henning okTheo de Raadt
2002-12-08strncpy is evil.Henning Brauer
2002-12-08allow flexible options order like Theo did for rules.Henning Brauer
2002-12-07Support parameters in anchor rules. Allows conditional evaluation, like:Daniel Hartmeier
2002-12-07more KNFHenning Brauer
2002-12-07KNFHenning Brauer
2002-12-07shadow cleanupHenning Brauer
2002-12-07kill an unused param to lungetcHenning Brauer
2002-12-07Convert the hash of a string key to network byte order. Makes regressionRyan Thomas McBride
2002-12-06Remove negated address list check again, doesn't work right yet.Daniel Hartmeier
2002-12-06Introduce anchors and named rule sets, allowing to load additional ruleDaniel Hartmeier
2002-12-05fix a small cosmetic problem. if ifa_lookup was called in LOOKUP_NET mode,Henning Brauer
2002-12-05-quote varset in -v outputHenning Brauer
2002-12-04in host(), apply a given netmask to all members of the node_host listHenning Brauer
2002-12-04do not warn for unused variables except with -v -v; henning okTheo de Raadt
2002-12-02KNFHenning Brauer
2002-12-02permit more flexible pass/block lines. the options giving at the end ofTheo de Raadt