summaryrefslogtreecommitdiff
path: root/sbin/pfctl/pfctl.c
AgeCommit message (Collapse)Author
2003-04-03Simplify pfctl printing code.Cedric Berger
ok dhartmei@ henning@
2003-04-02no \n w/ errx(3), reminded by andrushockHenning Brauer
2003-04-02better error handlingHenning Brauer
2003-04-02better error messageHenning Brauer
2003-03-27minor tweaks from Andrey Matveev, ok henning@ and cedric@Daniel Hartmeier
2003-03-27lotsa const char *Henning Brauer
from David Hill <david at phobia.ms> a while ago
2003-03-11On pfctl -a foo -Fn/-Fr, traverse all subrulesets in the anchor andDaniel Hartmeier
clear nat/rules, like -sn/-sr already does. Reported by Julien Bordet. ok henning@, cedric@
2003-03-11fix format strings in debugging output, qid is unsignedHenning Brauer
ok cedric@ mcbride@
2003-03-10it doesn't make sense to mimic pfctl -vsr output in pfctl -vsl (same forHenning Brauer
-vvsr ./. -vvsl). this resulted in more or less garbage in pfctl -vsl and -vvsl output. so ignore the extra verbosity flags for -sl. found by pb@ ok pb@ dhartmei@
2003-03-08inlcude queue interals in -gsr and -gsq output; will make debugging easier.Henning Brauer
ok cedric@ pb@
2003-03-07don't include debugging output, namely, the result of teh skip stepsHenning Brauer
calculation, in verbose output (pfctl -vvsr). Instead, use a new flag -g for that. result of a longer discussion with dhartmei@ and jakob@ ok cedric@ pb@
2003-02-20extra plurals; openbsd@davidkrause.comTheo de Raadt
2003-02-20Fix table syntax documentation, from David Krause.Cedric Berger
2003-02-19cmdline options in alphabetical order in usage() and manpage; and sync themHenning Brauer
from krause
2003-02-18fix load option handling (-A, -N, -R) for options.Henning Brauer
due to a bug in the loadopt check options were always loaded no matter which loadopts where specified. while beeing there, move the prints for that to where they belong, into the appropriate pfctl_set_* functions, and thus only print when the options are actually loaded. fixes regress tests pfopt3, pfopt4, pfopt5 I added earlier. ok dhartmei@
2003-02-17pfctl_clear_pool doesn't need to be prototyped twice eitherHenning Brauer
2003-02-17no need to prototype pfctl_add_pool twiceHenning Brauer
2003-02-17We want err() after failed ioctl() here too.Mike Pechkin
mcbride@, dhartmei@ ok
2003-02-14remove explicit table creation ( -T create ), it's useless.Henning Brauer
ok pb@ mcbride@ deraadt@
2003-02-11allow macro definition on the command line:Henning Brauer
pfctl -Dextif=wi0 -f /etc/pf.conf command line macro definitions override the ones made in the file (idea theo), very handy if your notebook has another NIC at some conference, as well as for debugging etc. idea rezine@mistrusted.net via pb@ hacked live at FOSDEM ok pb@ dhartmei@ cedric@
2003-02-05Simplify more.Cedric Berger
2003-02-05Simplify.Cedric Berger
2003-02-03remove loadopt global definition and cleanup a bit.Cedric Berger
ok henning@
2003-02-03zap dead codeHenning Brauer
2003-02-03fix a problem with queue definitions when load options (like -N etc) areHenning Brauer
given; they used to check for their parent interface/queue even in this case. ok dhartmei@ cedric@
2003-02-02there is no need to pass opts to parse_rules explicitely; it's passed asHenning Brauer
part of the struct pfctl.
2003-01-27When -a is specified, the operation affects an anchor only, so don't tryDaniel Hartmeier
to replace queues (or options) which are global and can't be loaded into an anchor. Found by j@pureftpd.org.
2003-01-24let pfctl -vvsq loop and display measured bandwidth and packets/s per queue.Henning Brauer
cbq only for now.
2003-01-21remove redundant ifCamiel Dobbelaar
ok dhartmei
2003-01-20Remove unused argument from print_name() and fix two other nitsCamiel Dobbelaar
found by lint. ok henning
2003-01-19Simplify and KNF anchoropt processing.Camiel Dobbelaar
ok dhartmei henning
2003-01-19The -s option to show anchors is 'A' or 'Anchors', not 'a' (which is usedDaniel Hartmeier
to show 'all' information).
2003-01-18Move freeaddrinfo() so it doesn't get called with an uninitializedDaniel Hartmeier
pointer (which segfaults). From Julien Bordet.
2003-01-18Cleanup PF_OPT_NOACTION with tables. No changes on current behaviour,Cedric Berger
but do something useful when the user has no access to /dev/pf. Tested on i386, sparc64. ok henning@
2003-01-15what a bogus messageTheo de Raadt
2003-01-15Repair table "load" command.Cedric Berger
2003-01-11whitespace KNF _AGAIN_Henning Brauer
2003-01-10Be a bit more strict when parsing options.Cedric Berger
Disallow "pfctl -s rabbits" and friends. ok dhartmei@
2003-01-09strlcpy return checks.Daniel Hartmeier
2003-01-09use a verbose flag in pfctl_show_altq instead of carrying around opts fromHenning Brauer
pfctl.c, and get rid of the #include "pfctl_parser.h"
2003-01-09first attack at pfctl queue statistics, to be displayed with pfctl -vsqHenning Brauer
This commit is dedicated to the cute KLM girls who made part of this possible with giving me a seat in the plane where you actually have enough place to hack. Thanks, girls. ok markus@ dhartmei@
2003-01-09Add support for active/inactive tablesets in the kernel.Cedric Berger
Add table definition/initialisation construct in pfctl parser. Add and fix documentation for pf.4 and pf.conf.5. Tested on i386 and sparc64 by myself, macppc by Daniel. ok dhartmei@
2003-01-07the "default" alias for "normal" optimization in pf_hints is dead for someHenning Brauer
time now... catched by david krause
2003-01-05don't whine about missing altq support in the kernel in the -q caseHenning Brauer
ok dhartmei@
2003-01-05Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for tableDaniel Hartmeier
name. ok henning@, mcbride@, cedric@
2003-01-04I do not know where this policy of "one .h file for every .c file" comesTheo de Raadt
from, but whoever thought of it is stupid.
2003-01-03no need to closeTheo de Raadt
2003-01-03(a && (b & c))Theo de Raadt
2003-01-03simplify ioctl accessTheo de Raadt
2003-01-03Bring in userland code for accessing PF radix tables.Cedric Berger
ok dhartmei@ mcbride@