summaryrefslogtreecommitdiff
path: root/sbin/pfctl/pfctl.c
AgeCommit message (Expand)Author
2001-12-10Add stateful filtering for other (non-TCP/UDP/ICMP) protocol, based onDaniel Hartmeier
2001-10-04Honour -v flag when printing states, print only one line per state whenDaniel Hartmeier
2001-10-02Remove duplication from simultaneous commitsMike Frantzen
2001-10-02Typo fixes (thanks gwyllion@ace.ulyssis.org)Mike Frantzen
2001-10-02'pfctl -O foo' dumped core. A check was there, but didn't work.Daniel Hartmeier
2001-10-01print variable asignments only if -v is given. ok dhartmei/deraadtMarkus Friedl
2001-10-01Print error message when pfctl -N/-R can't open the specified fileDaniel Hartmeier
2001-09-30Selectable preset FSM optimizations for several network environments.Mike Frantzen
2001-09-22remove debug printfTheo de Raadt
2001-09-061:1 bidrectional NAT (binat); ok dhartmei@ and frantzen@jasoni
2001-08-28Bump state timeouts and allow tweaking them from pfctl.Mike Frantzen
2001-08-23for -s all, do not error out when the first ioctl failsTheo de Raadt
2001-08-19do not spin if no states are foundTheo de Raadt
2001-08-19Add per-rule byte counter, so mickey can do accounting. We're counting theDaniel Hartmeier
2001-08-19Print per-rule statistics when -v is used with -sr (show rules).Daniel Hartmeier
2001-08-18make pfctl -s state SCREAM; frantzen is now happyTheo de Raadt
2001-08-11Add support for ICMP errors referring to ICMP queries/replies. FixesDaniel Hartmeier
2001-08-11\+\n support, and spit out cc-style error messages. the parser's lineTheo de Raadt
2001-07-26usage() with __progname according to style(9), typo in man page. both from mp...Daniel Hartmeier
2001-07-17bitch about extra command line args; ok dhartmei@ and markus@Marco S Hyman
2001-07-16add a yacc parser for pf.conf and nat.conf, with help from mickey@,Markus Friedl
2001-07-05&, not &&. Pointed out by dhartmei@.Hakan Olsson
2001-07-03Add a -q (quiet) option. dhartmei@ ok.Hakan Olsson
2001-07-01Finish with posixifying command options. Now both "pfctl -Fs" andKjell Wooding
2001-06-29change load_file implementation so we can accept input onKjell Wooding
2001-06-28usage() was out of dateDaniel Hartmeier
2001-06-27Change flag syntaxKjell Wooding
2001-06-27errx() doesn't return. use err() to get errno as well. translate two common e...Daniel Hartmeier
2001-06-27Use bitfields for flag options in getopt.Kjell Wooding
2001-06-27add -z flag for zeroing statistics. -s status no longer resets anythingKjell Wooding
2001-06-26Add -N (parse, but do not load) and -v (verbose: show parsed rules)Kjell Wooding
2001-06-26bad smartNiels Provos
2001-06-26Add err.h for errx()smart
2001-06-26some warnx, and exit instead of returnNiels Provos
2001-06-26add rule nr for NielsDaniel Hartmeier
2001-06-26use errx()Theo de Raadt
2001-06-26display usage if no command line args; ok dhartmei@jasoni
2001-06-25Fix up usage() and alphabetize options.smart
2001-06-25Separate getopt handling from execution of functions. Still needsmart
2001-06-25revised ioctl interface, first getopt version of pfctlDaniel Hartmeier
2001-06-25catch up, might have introduced bugs, but there is a next pass...Theo de Raadt
2001-06-25catch up to Art changes in the kernelTheo de Raadt
2001-06-25use only ioctl return values found in errno.hDaniel Hartmeier
2001-06-24ioctlbuffer renamed.Artur Grabowski
2001-06-24some KNFNiels Provos
2001-06-24match changes in header filesTheo de Raadt
2001-06-24REGENTS -> COPYRIGHT HOLDERSDaniel Hartmeier
2001-06-24Move and rename packet filter userland.Kjell Wooding