summaryrefslogtreecommitdiff
path: root/sbin/pfctl/pfctl.c
AgeCommit message (Expand)Author
2002-12-17Match merge of pf_nat/pf_binat/pf_rdr structs into pf_ruleRyan Thomas McBride
2002-12-16only try to add the root queue for cbqHenning Brauer
2002-12-10don't warnx after ioctl, use warnHenning Brauer
2002-12-09replace (properly guarded) strncpy using logic by a strsep & strlcpy usingHenning Brauer
2002-12-07TAILQ_INSERT_TAIL instead of TAILQ_INSERT_HEAD. Makes addresses printRyan Thomas McBride
2002-12-06Introduce anchors and named rule sets, allowing to load additional ruleDaniel Hartmeier
2002-12-05one step further to "program output is valid program input" and the relatedHenning Brauer
2002-12-05Replace warnx with warn on ioctls so that we get the error message associatedRyan Thomas McBride
2002-12-04do not warn for unused variables except with -v -v; henning okTheo de Raadt
2002-12-01deal with not-ALTQ-enabled kernelsHenning Brauer
2002-12-01Match pf_ioctl.c cleanup; set up the pool_ticket when loading rulesRyan Thomas McBride
2002-11-24Fix an error message and remove 'S' from getopt, it's not used.Daniel Hartmeier
2002-11-24Same fix for nat and rdr. Now all regress tests pass with malloc.conf JDaniel Hartmeier
2002-11-24Don't memcpy() structures that contain TAILQs. If you need a copy, you haveDaniel Hartmeier
2002-11-23KNFTheo de Raadt
2002-11-23don't try to do ioctl with pfctl -nRyan Thomas McBride
2002-11-23code to support loading of pf rules with multiple redirection addressesRyan Thomas McBride
2002-11-22print altq and queue lines in the pfctl -v case including the child queueHenning Brauer
2002-11-18altq and pf mergedHenning Brauer
2002-10-07-Wsign-compare cleanDaniel Hartmeier
2002-10-07Two cases of const-correctness and make one global local.Daniel Hartmeier
2002-07-05allow unsetting the statusinterface viaHenning Brauer
2002-07-01KNFTheo de Raadt
2002-06-25move pfctl options -t, -m, -O and -l to pf.conf. These are set using theHenning Brauer
2002-06-14make the output of pfctl -k look nice againHenning Brauer
2002-06-12this stuff really belongs to stderr, not stdoutHenning Brauer
2002-06-11Typo in err()Kjell Wooding
2002-06-11nuke an unused parameter in pfctl_timeout. ok frantzen@Kjell Wooding
2002-06-11Add -N and -R options. When used in conjunction withKjell Wooding
2002-06-11sync usage() with realityHenning Brauer
2002-06-10Merge the NAT and rules files into a single rulefile. Rules must beKjell Wooding
2002-06-10some olde version piece crept into my diffski; pt out by dfa@Michael Shalayeff
2002-06-09use strchr() instead of index()Theo de Raadt
2002-06-08pf_timeouts is shared between pfctl and authpf, put it in the shared file.Dale Rahn
2002-06-08Make state timeouts configurable per rule, likeDaniel Hartmeier
2002-06-07Add "(max <number>)" option for "keep/modulate state" to limit the numberDaniel Hartmeier
2002-06-06split out the pf_state printing functions to be used elsewhere, no functional...Michael Shalayeff
2002-06-03Also print labels in 'pfctl -s all'. ok dhartmei@Kjell Wooding
2002-05-23tiny KNF, some malloc checks, etcTheo de Raadt
2002-05-19KNFTheo de Raadt
2002-05-19KNFTheo de Raadt
2002-05-19KNFTheo de Raadt
2002-05-19nicer usageTheo de Raadt
2002-04-24Add dynamic (in-kernel) interface name -> address translation. Instead ofDaniel Hartmeier
2002-04-01change return values back from EX_* to 0/1Daniel Hartmeier
2002-04-01style(9) improvements from Raymond M SchneiderDaniel Hartmeier
2002-03-28prototype pfctl_kill_states()Daniel Hartmeier
2002-03-26tidy up usage statement and sort headers. patch from dfa@solo.eeMike Frantzen
2002-03-25add -k option to shootdown all the state entries from the specified hostMike Frantzen
2002-03-11Add -r to reverse lookup addresses when displaying states.Daniel Hartmeier