summaryrefslogtreecommitdiff
path: root/sbin/pfctl/pfctl.c
AgeCommit message (Expand)Author
2010-10-01Add the -R id option to pfctl that allows to show only a specified ruleReyk Floeter
2010-09-02remove trailing spaces and tabs; no binary change.Igor Sobrado
2010-08-11Fix a logic problem which could in theory cause pfctlJonathan Gray
2010-07-03Fix a couple of problems with printing of anchors, in particular recursiveRyan Thomas McBride
2010-07-01Fix 'pfctl -a anchor -Fa' segfault introduced in r1.298.Stefan Sperling
2010-06-28Clean up iterface stats handling:Ryan Thomas McBride
2010-06-25remove -m (merge).Henning Brauer
2010-04-02Use a dedicated variable to prevent attempting to open multipleStuart Henderson
2010-03-23remove -A, -O, -R and -T loadHenning Brauer
2010-01-18Convert pf debug logging to using log()/addlog(), a single standardisedRyan Thomas McBride
2010-01-13fix some leaks found by parfaitJonathan Gray
2010-01-12First pass at removing the 'pf_pool' mechanism for translation and routingRyan Thomas McBride
2009-12-10plug some memory leaks; found by parfait, ok henningTheo de Raadt
2009-11-22cleanup after the NAT changes. we used to have multiple rulesets (scrub,Henning Brauer
2009-10-28Add a dedicated pf pool for route options as suggested by henning,Jonathan Gray
2009-09-29sort usage();Jason McIntyre
2009-09-28add -S and -L options to store and load the pf state table from a file.David Gwynne
2009-09-03remove -N from usage();Jason McIntyre
2009-09-01the diff theo calls me insanae for:Henning Brauer
2009-08-21remove the ``;'' at the end of INDENT() macro definition usingAlexandre Ratchov
2009-07-09repair -xHenning Brauer
2009-04-16Really turn fragment reassembly on by default. pfctl must handle thisDavid Krause
2009-04-061) scrub rules are completely gone.Henning Brauer
2009-02-23back out last commit since it breaks a few regress tests -- this will beTheo de Raadt
2009-02-16fix pfctl -v printing of anchors, from camield@. Closes user/6065Stuart Henderson
2008-08-31avoid line wrap in usage() output;Jason McIntyre
2008-07-24check sysctl return valueHenning Brauer
2008-05-27Fix count of states flushed, broken when the psnk_af hack was removed in pf_i...Ryan Thomas McBride
2008-05-09Add support to kill states by rule label or state id.Marco Pfatschbacher
2008-05-06Add a counter to record how many states have been created by a rule.Marco Pfatschbacher
2008-02-13Use HW_PHYSMEM64.Mark Kettenis
2007-11-27typos; ok jmc@Martynas Venckus
2007-10-24HW_PHYSMEM is unsignedPeter Stromberg
2007-10-15specifying int instead of just unsigned is better styleTheo de Raadt
2007-10-13in all these programs using the same pfctl-derived parse.y, re-unify theTheo de Raadt
2007-06-30allow states instead of just state for -s and -F for consistency's sake.Henning Brauer
2007-05-31Cope with new ioctl interface (use pfsync_state instead of pf_state)Ryan Thomas McBride
2007-04-21"o" in optiopt_list is superfluous now tooHenning Brauer
2007-04-21fix -o handling. syntax is now -o none|basic|profile. -o without argumentHenning Brauer
2007-04-20no whitespace allowed between -o and its argument, so update doc/usage()Jason McIntyre
2007-03-21Enable basic ruleset optimization by default.Ryan Thomas McBride
2007-03-01be more careful with mixing &/| with &&/||, ok ottoTheo de Raadt
2007-02-23if machine has more than 100MB of physmem, default the max table entriesTheo de Raadt
2007-02-09pfctl_clear_rule_counters() is not needed any moreHenning Brauer
2007-02-09use DIOCGETRULE ioctl & action set to PF_GET_CLR_CNTR to clear countersHenning Brauer
2007-01-18implement -T expire.Henning Brauer
2006-11-20-K argument to kill source tracking nodes explicitly, behaves like theRyan Thomas McBride
2006-11-07Only try to recursively print rules if they are actually anchors.Ryan Thomas McBride
2006-11-07Unbreak authpf by handling non-inline anchors separately from the { } anchorsRyan Thomas McBride
2006-11-05Don't open a transaction for a ruleset unless it's a brace ruleset thatRyan Thomas McBride