summaryrefslogtreecommitdiff
path: root/sbin/pfctl/pfctl.c
AgeCommit message (Expand)Author
2019-08-15pfctl_reset() must set syncookies settings back to defaultAlexandr Nedvedicky
2019-07-09Add parentheses for readabilitykn
2019-06-28When system calls indicate an error they return -1, not some arbitraryTheo de Raadt
2019-04-15introduce 'pfctl -FR' to reset settings to defaultsAlexandr Nedvedicky
2019-03-06Fix once ruleskn
2019-02-18Change ps_len of struct pfioc_states and psn_len of structAlexander Bluhm
2019-02-10Anchor names must not be emptykn
2019-01-29Reuse copy_satopfaddr() when killing entrieskn
2019-01-29Make -N and -r mutually exclusivekn
2019-01-28Simplify lookups when killing entrieskn
2019-01-19Use mnemonic PFCTL_SHOW_* macros, terminate string with null characterkn
2019-01-11Defuse `-F all -i interface'kn
2019-01-11When creating tables inside anchors, pfctl warned about namespacekn
2019-01-10Zap unnused iface function parameter from pfctl_kill_src_nodes()kn
2019-01-02Error out on missing table command, zap internal wrapper functionkn
2018-12-27Zap duplicate struct declarationkn
2018-09-18fix table commands under anchorskn
2018-09-08Allocate path only when needed, use __func__kn
2018-09-08Error out early on bad anchor usagekn
2018-09-07Fix function name in error messages by using __func__kn
2018-07-20Stop checking table commands for `create'kn
2018-07-10'set delay' for the generic packet delay mechanism, ok benno sashanHenning Brauer
2018-02-08make the watermarks/thresholds for entering and leaving syncookie mode whenHenning Brauer
2018-02-08show current synflood detection watermarks in pfctl -vsi, for the lackHenning Brauer
2018-02-06allow control over syncookies: set syncookies never/always/adaptiveHenning Brauer
2017-11-25- pfctl fails to handle nested 'load anchor' properlyAlexandr Nedvedicky
2017-09-26- pfctl always prints warning when flushes rulesetAlexandr Nedvedicky
2017-09-05- split pf_find_or_create_ruleset() to smaller chunks.Alexandr Nedvedicky
2017-08-11add option -N (no domain resolution)Sebastian Benoit
2017-07-19Allow HFSC classes to use flow queuesMike Belopuhov
2017-07-19Rework HFSC vs FQ-CoDel checksMike Belopuhov
2017-06-16pfctl: merge identifical if conditions and void functions discarding ret valuesAdam Wolk
2017-05-30fix a commentHenning Brauer
2017-05-15Hook up FQ-CoDel to the tree and enable configuration in the pfctl(8)Mike Belopuhov
2017-04-26Perform H-FSC root queue allocation in the kernelMike Belopuhov
2017-04-23oops, this was meant to be committed with the pfctl.8 change:Jason McIntyre
2017-04-21Add "key" modifier for -k to make pfctl can kill a state by specifyingYASUOKA Masahiko
2017-03-27rather than printing the wrong function name, dont print it at all.Sebastian Benoit
2017-01-26Select the routing domain to be used for kill states by host or bySebastian Benoit
2016-09-03err->errx, errno info is not related to the failure modeJeremie Courreges-Anglas
2016-09-03pfctl mixes up anchorname with anchorpathAlexandr Nedvedicky
2016-09-03Let purge thread to remove once rules, not packets.Alexandr Nedvedicky
2016-01-14detect multiple root queues on a single interface and give a nice errorHenning Brauer
2016-01-05remove long deprecated "set debug "none|urgent|misc|loud" levels inSebastian Benoit
2015-12-10Remove NULL-checks before free(). ok tb@mmcc
2015-10-02Make 'pfctl -s all' show queues. pfctl(8) says it does, and 5.4Kenneth R Westerback
2015-06-12Allow rule ID filter to be specified for show states outputMike Belopuhov
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers whereTheo de Raadt
2014-12-10If pfctl cannot set a limit in the kernel, print the name of theAlexander Bluhm
2014-11-13keep queues around when anchors are being loadedMartin Pelikan