summaryrefslogtreecommitdiff
path: root/sbin/pfctl/pfctl.8
AgeCommit message (Collapse)Author
2003-05-24tweak;Jason McIntyre
ok cedric@
2003-05-24syncCedric Berger
2003-05-05Describe format of pfctl -sl output, reported by Alejandro G. Belluscio.Daniel Hartmeier
2003-05-03these files all had >9 arguments to .Nd, causing the name description to beJason McIntyre
truncated. i wrapped them in double quotes to preserve the line. grep inspired by an -mdoc lesson from millert@
2003-04-03Table stats are reliable now.Cedric Berger
2003-03-11sprinkle some .LiDavid Krause
ok deraadt@
2003-03-11fix spacing in sample outputDavid Krause
ok cedric@
2003-03-10whitespaceHenning Brauer
2003-03-10based on ideas from david, fix the Cm problems, and othersTheo de Raadt
2003-03-07Only show non-active tables when the -g flag is given.Cedric Berger
ok dhartmei@ henning@
2003-03-07document -gHenning Brauer
ok jmc@
2003-03-06tweak wording and mdoc formattingDavid Krause
ok jmc@ henning@
2003-03-04wrap Ic in Xo/Xc until fixedTheo de Raadt
2003-02-24echo->printf, because echo does not accept "\n" in all shells.Cedric Berger
ok henning@
2003-02-20extra plurals; openbsd@davidkrause.comTheo de Raadt
2003-02-20Fix table syntax documentation, from David Krause.Cedric Berger
2003-02-19cmdline options in alphabetical order in usage() and manpage; and sync themHenning Brauer
from krause
2003-02-19clarify how pfctl -k works a bit; based on a discussion with daniel and samHenning Brauer
smith. ok dhartmei@
2003-02-14remove explicit table creation ( -T create ), it's useless.Henning Brauer
ok pb@ mcbride@ deraadt@
2003-02-14English and mdoc fixes thanks to jmc@Cedric Berger
2003-02-14tweakHenning Brauer
2003-02-14Document verbose mode with tables (statistics).Cedric Berger
2003-02-14more good tweaks by krauseHenning Brauer
2003-02-13when talking about the order requirement, mention all 7 sections we have now.Henning Brauer
from krause with minor tweaks by me grammar ok jmc@
2003-02-11document pfctl -D macro=valueHenning Brauer
2003-02-08Add an example of "pfctl -a anchor -s rules" usage, and make it clearDaniel Hartmeier
that -a -s is needed for this, not -sa.
2003-01-28typos; added white boldface to examplesJason McIntyre
ok deraadt@
2003-01-25tables are just tables; implementation details (radix) don't need to beHenning Brauer
mentioned. accidently already slipped in w/ my last commit; this one is forced. ok theo
2003-01-25kill whitespace at EOLHenning Brauer
2003-01-24document pfctl -vvsqHenning Brauer
2003-01-22Automatically create tables for the "add" and "replace" table commands.Cedric Berger
Requested by deraadt@, pass all regress tests.
2003-01-19The -s option to show anchors is 'A' or 'Anchors', not 'a' (which is usedDaniel Hartmeier
to show 'all' information).
2003-01-10Fix adding and deleting addresses in a table when there is a conflict withCedric Berger
the "negated" attribute of an address. The previous behaviour was incorrect in both cases (too strict for the add command and too permissive for the delete command). ok dhartmei@
2003-01-10More details about the -T flag. Suggested by Rukh <openbsd@rukh.net>Cedric Berger
2003-01-09note about queue statsHenning Brauer
2003-01-09Add support for active/inactive tablesets in the kernel.Cedric Berger
Add table definition/initialisation construct in pfctl parser. Add and fix documentation for pf.4 and pf.conf.5. Tested on i386 and sparc64 by myself, macppc by Daniel. ok dhartmei@
2003-01-03Bring in userland code for accessing PF radix tables.Cedric Berger
ok dhartmei@ mcbride@
2002-12-15There is no such thing as pf=YES variable, there is a variablemargarida
named pf which you can assign YES. Mention net.inet6.ip6.forwarding. inspired by nick@ and ok'd by henning@
2002-12-15rule set(s) -> ruleset(s)margarida
henning@ ok
2002-12-06Introduce anchors and named rule sets, allowing to load additional ruleDaniel Hartmeier
sets with pfctl and evaluate them from the main rule set using a new type of rule (which will support conditional evaluation soon). Makes maintenance of sub-rulesets simpler for pfctl and daemons. Idea and ok deraadt@
2002-12-04do not warn for unused variables except with -v -v; henning okTheo de Raadt
2002-11-24missed one about ordering in the ruleset-filePhilipp Buehler
2002-11-24modifiers for -F/-s in the same order as it is required in pf.conf(5)Philipp Buehler
2002-11-20document the relevant queue optionsPhilipp Buehler
henning@ ok
2002-11-09SEE ALSO reordering and corrections.Federico G. Schwindt
2002-09-18fix Xr refs; frisco@blackant.netTheo de Raadt
2002-06-27fix synopsis, closes pr2775Henning Brauer
ok pb@
2002-06-25move pfctl options -t, -m, -O and -l to pf.conf. These are set using theHenning Brauer
"set" keyword. example rulefile: set optimization aggressive set timeout { tcp.closing 6, tcp.opening 6 } set limit { states 1000, frags 1000 } set loginterface wi0 pass out all keep state label "$nr:$srcaddr:$srcport:$dstaddr:$dstport" block in all fries@ is working on an updated pf.conf(5) discussed at c2k2 and on icb ok dhartmei@, kjell@
2002-06-11Add -N, -RKjell Wooding
2002-06-11sync with realityHenning Brauer
ok dhartmei@