summaryrefslogtreecommitdiff
path: root/sbin/pfctl/pfctl.8
AgeCommit message (Collapse)Author
2002-11-09SEE ALSO reordering and corrections.Federico G. Schwindt
2002-09-18fix Xr refs; frisco@blackant.netTheo de Raadt
2002-06-27fix synopsis, closes pr2775Henning Brauer
ok pb@
2002-06-25move pfctl options -t, -m, -O and -l to pf.conf. These are set using theHenning Brauer
"set" keyword. example rulefile: set optimization aggressive set timeout { tcp.closing 6, tcp.opening 6 } set limit { states 1000, frags 1000 } set loginterface wi0 pass out all keep state label "$nr:$srcaddr:$srcport:$dstaddr:$dstport" block in all fries@ is working on an updated pf.conf(5) discussed at c2k2 and on icb ok dhartmei@, kjell@
2002-06-11Add -N, -RKjell Wooding
2002-06-11sync with realityHenning Brauer
ok dhartmei@
2002-06-03Add NAT keyword so it is picked up by apropos (man -k NAT). ok dhartmei@Kjell Wooding
2002-04-08Fix typo, from Raymond M SchneiderDaniel Hartmeier
2002-03-26sort options and clean up the -k descrption. patch from dfa@solo.eeMike Frantzen
2002-03-25add -k option to shootdown all the state entries from the specified hostMike Frantzen
ok dhartmei@
2002-03-21Add r option to SYNOPSIS. From Brian Poole.Daniel Hartmeier
2002-03-11Add -r to reverse lookup addresses when displaying states.Daniel Hartmeier
From John Kerbawy.
2002-02-26Add optional pool memory hard limits, mainly as temporary solutionDaniel Hartmeier
until pool exhaustion causes problems no more.
2002-02-11Initial patch.Mike Pechkin
When you give command examples in a manual page prefix them with $ command or # command deraadt@ ok
2002-01-09Add labels to rules. These are arbitrary names (not to be confused withDaniel Hartmeier
tags that will be used to tag packets later on). Add pfctl -z to clear per-rule counters. Add pfctl -s labels to output per-rule counters in terse format and only for rules that have labels. Suggested by Henning Brauer.
2001-12-21Initial patch for a new mdoc issue.Mike Pechkin
Powered by @mantoya: o) kill extra line in the end of file; o) kill extra space in the end of line; o) replace blank lines with .Pp; millert@ ok
2001-12-13o) start new sentence on a new line;Mike Pechkin
o) wrap long lines; o) fix bogus .Xr usage; o) we don't like blank lines; o) always close .Bl tags; o) OpenBSD -> .Ox; o) don't like .Pp before .Ss; millert@ ok;
2001-12-10Convert usage of 'you' to third person. Reword some sentences.Daniel Hartmeier
2001-12-10Add stateful filtering for other (non-TCP/UDP/ICMP) protocol, based onDaniel Hartmeier
source/destination addresses/ports only. Add RDR for ICMP. Add NAT/RDR/BINAT for other protocols. Destination and redirection port(s) are now optional for RDR rules. Not specifying destination port(s) means 'redirect all ports', not specifying redirection port(s) means 'redirect to the original port'.
2001-10-11Corrections from Brian J. Kifiak.Daniel Hartmeier
2001-09-30Selectable preset FSM optimizations for several network environments.Mike Frantzen
Thanks to everyone who sent me packet captures!
2001-09-06Initial idea from aaron@: Last char of .Xr group in SEE ALSO section shouldMike Pechkin
be a single digit. Powered by mantoya@. millert@ ok.
2001-08-28Bump state timeouts and allow tweaking them from pfctl.Mike Frantzen
(The state timeouts need some _serious_ tuning)
2001-08-22ftp-proxyBob Beck
2001-08-19Document per-rule byte counter.Daniel Hartmeier
2001-08-19Document per-rule statistics. If the evaluation counters look funny,Daniel Hartmeier
think skip steps.
2001-08-11Add support for ICMP errors referring to ICMP queries/replies. FixesDaniel Hartmeier
'ICMP error message for bad proto' messages. Reported by Mark Grimes and Steve Rumble. Add debugging level with ioctl interface and pfctl switch. Default is 'None'.
2001-08-03o) We always closes .Bl and .Bd tags;Mike Pechkin
millert@ ok
2001-07-28start sentence on new line, from mpech@Daniel Hartmeier
2001-07-26sort SEE ALSO section correctly, from mpech@.Daniel Hartmeier
2001-07-26usage() with __progname according to style(9), typo in man page. both from ↵Daniel Hartmeier
mpech@.
2001-07-20we don't like:Mike Pechkin
o) .Pp before/after .Sh; o) .Pp before/after .Rs/.Re; o) .Nm without argument in SYNOPSIS;
2001-07-04do not pick a fightTheo de Raadt
2001-07-03Missed a few style fixes...Hakan Olsson
2001-07-03Document -q option. Some style fixes. dhartmei@ ok.Hakan Olsson
2001-07-02Typo.Hakan Olsson
2001-07-01Appeared in 3.0, not 2.9; openbsd@davidkrause.comAngelos D. Keromytis
2001-07-01Finish with posixifying command options. Now both "pfctl -Fs" andKjell Wooding
"pfctl -F states" work. Changed -[Fs]S to -[Fs] info (or -[Fs]i) based on an earlier conversation with theo. Added -[Fs] "all" to show or flush everything Fixup some man page pastos in the process
2001-06-29POSIX-ify the flag options at theo's requestKjell Wooding
2001-06-27Change flag syntaxKjell Wooding
-Fs, -Fn, -Fr, -FS to flush states, nat rules, filter rules, stats -ss, -sn, -sr, -sS to show them -z goes away
2001-06-27add -z optionKjell Wooding
2001-06-26Add -N (parse, but do not load) and -v (verbose: show parsed rules)Kjell Wooding
for pf and nat rules.
2001-06-26Clarify what the -l option does.Kjell Wooding
2001-06-26languageTheo de Raadt
2001-06-26change config file names to pf.conf and nat.confKjell Wooding
2001-06-26Renamed files to pf.filter and pf.rulesIan Darwin
2001-06-26Update man page to reflect the new getopt-style parametersKjell Wooding
2001-06-26Fix .Ox callsIan Darwin
2001-06-25fixup .Xr for pf(4); pf(4,) -> pf(4),jasoni
2001-06-25Better style in description; additional sections at end.Ian Darwin
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-07 06:39:18 +0000