summaryrefslogtreecommitdiff
path: root/sbin/pfctl/parse.y
AgeCommit message (Expand)Author
2019-10-17Use -1 to indicate an invalid uid/gid, not UID_MAX and GID_MAX.Todd C. Miller
2019-08-26Fix file descriptor leak due to popfile() never closing the main config file.tobhe
2019-07-05Fix integer sizes in format strings and enable formatting warningsPatrick Wildt
2019-05-08pfctl should check pfctl.astack is not overrunAlexandr Nedvedicky
2019-04-18Fix table definition parsing as unprivileged userkn
2019-03-06Fix once ruleskn
2019-02-13(unsigned) means (unsigned int) which on ptrdiff_t or size_t or otherTheo de Raadt
2019-02-10Anchor names must not be emptykn
2019-02-10Unify anchor name sanity checkskn
2019-01-31Make divert-packet port accept any port specificationkn
2019-01-11When creating tables inside anchors, pfctl warned about namespacekn
2018-11-15scrub opts dont set tos, so remove it from the scrub_opts structDavid Gwynne
2018-11-10Unbreak `-D macro=value' (r1.686 regression)kn
2018-11-07sync cmdline_symset() changes with src/usr.sbin; OK sashan@ claudio@miko
2018-11-01- odd condition/test in PF lexerAlexandr Nedvedicky
2018-09-16Use uid_from_user(3) and gid_from_group(3) in utilities thatTodd C. Miller
2018-09-06Remove unused af argument from unmask()kn
2018-07-16reduce duplicate code, fix typo/free correct bufferkn
2018-07-13Fix regression on child queue definitionskn
2018-07-11Prevent invalid interface specifiers on queue ruleskn
2018-07-11Do for most running out of memory err() what was done for most runningKenneth R Westerback
2018-07-10'set delay' for the generic packet delay mechanism, ok benno sashanHenning Brauer
2018-07-10fix anchor rules with filter opts, introduce filteropts_to_rule()kn
2018-07-09Zap dead codekn
2018-07-09No need to mention which memory allocation entry point failed (malloc,Kenneth R Westerback
2018-07-08Be consistent in warn() and log_warn() usage whenKenneth R Westerback
2018-05-18A pf rule with a "on rdomain n" with nonexisting rdomain n will cause anSebastian Benoit
2018-05-09Fix (include file ) line number counting by keeping track of the ungetOtto Moerbeek
2018-04-26Plug leak in error case of the common 'varset' implementations.Kenneth R Westerback
2018-02-08make the watermarks/thresholds for entering and leaving syncookie mode whenHenning Brauer
2018-02-06allow control over syncookies: set syncookies never/always/adaptiveHenning Brauer
2017-11-28The divert structure was using the port number to indicate thatAlexander Bluhm
2017-11-27The divert structure was using the port number to indicate thatAlexander Bluhm
2017-11-25- pfctl fails to handle nested 'load anchor' properlyAlexandr Nedvedicky
2017-11-14- nested anchors vs. pfctl/parse.yAlexandr Nedvedicky
2017-11-13add a generic packet rate matching filter. allows things likeHenning Brauer
2017-08-11add option -N (no domain resolution)Sebastian Benoit
2017-07-19Allow HFSC classes to use flow queuesMike Belopuhov
2017-07-19Rework HFSC vs FQ-CoDel checksMike Belopuhov
2017-05-28Don't check np->port for NULL - it's an array, it's never NULL.Michal Mazurek
2017-05-15Hook up FQ-CoDel to the tree and enable configuration in the pfctl(8)Mike Belopuhov
2017-04-28Remove double assignmentsMike Belopuhov
2017-01-05Replace symset()'s hand-rolled for(;;) traversal of 'symhead' TAILQKenneth R Westerback
2016-11-23Explicitly forbid to combine af-to with route-to in pfctl. TheAlexander Bluhm
2016-08-26Add <time.h> for time(); sort <*.h> includesPhilip Guenther
2016-07-18g/c unused (global!) var: oqueues isn't used any more. ALTQ leftover; notHenning Brauer
2016-06-22Add curly braces that were missed in rev 1.651. Add parenthesis to make theMark Kettenis
2016-06-21do not allow whitespace in macro names, i.e. "this is" = "a variable".Sebastian Benoit
2016-06-21the manpage documents that af-to does not work on pass out rules, butSebastian Benoit
2016-06-16allow include in inline anchorsHenning Brauer