summaryrefslogtreecommitdiff
path: root/sbin/pfctl/pfctl_parser.c
AgeCommit message (Expand)Author
2003-07-11Better parsing and -v support for tables:Cedric Berger
2003-07-04KNF after cedric (grmpf)Henning Brauer
2003-07-04allow for a "pass" modifier on translation rules:Henning Brauer
2003-07-03This patch finally cleanup pfctl_table.c. No more global buffer,Cedric Berger
2003-06-12in set_ipmask, do not try to mask off irrelevant bits of anything butHenning Brauer
2003-06-11- sync up MLD declaration with RFC3542 (s/MLD6/MLD/)Jun-ichiro itojun Hagino
2003-06-09Attempt to resolve byte order confusion in nat code once and for all.Ryan Thomas McBride
2003-05-24better netmask checkHenning Brauer
2003-05-19reject invalid netmasks like 10.0.0.0/68, and fix up the netmask forHenning Brauer
2003-05-19err out on obviously wrong netmasksHenning Brauer
2003-05-17support inverse matching on tags likeHenning Brauer
2003-05-16TCP SYN proxy. Instead of 'keep state' or 'modulate state', one can useDaniel Hartmeier
2003-05-14add scrub modifier "reassemble tcp" to turn on stateful TCP normalizationsMike Frantzen
2003-05-14print the redirection target for nat/rdr/binat slighly later.Henning Brauer
2003-05-13correct rule printingHenning Brauer
2003-05-13userland part for tagging.Henning Brauer
2003-05-12Adaptive timeout value scaling. Allows to reduce timeout values as theDaniel Hartmeier
2003-04-25kill a workaround now that inet_net_pton acts reasonablyHenning Brauer
2003-04-05ease netmask handling a bitHenning Brauer
2003-04-03Simplify pfctl printing code.Cedric Berger
2003-03-28one more const was missingHenning Brauer
2003-03-27lotsa const char *Henning Brauer
2003-03-19inet_net_pton acts weird when it comes to multicast addresses. so pass theHenning Brauer
2003-02-25repair/simplify/flexify binat userland.Cedric Berger
2003-02-19Fix little buffer overflow on 64-bit platforms.Cedric Berger
2003-02-13when complaining about an illegal netmask print the value we're complainingHenning Brauer
2003-02-12Simplify the code and make the parser handle the different rule typesRyan Thomas McBride
2003-02-09Fix a few warnings and remove unnecessary check and cast.Camiel Dobbelaar
2003-02-08Add scrub option 'random-id', which replaces IP IDs with random valuesDaniel Hartmeier
2003-02-02no const for int; cedric@Henning Brauer
2003-02-02const'ify params for the host stuffHenning Brauer
2003-02-02as correctly pointed out by cedric@, the :network and :broadcast parsingHenning Brauer
2003-01-30in these two cases strdup makes more sense than asprintf, pointed out byHenning Brauer
2003-01-30add support for :network and :broadcast modifiers to interface names.Henning Brauer
2003-01-25Match changes for rdr port ranges made to pf.c:Ryan Thomas McBride
2003-01-20Improve pfctl -vvs{r,n} output with rule containing tables.Cedric Berger
2003-01-19Quote label in rule output.Camiel Dobbelaar
2003-01-18quite some KNF for the older partsHenning Brauer
2003-01-18host() overhaul:Henning Brauer
2003-01-17KNFMarkus Friedl
2003-01-14unified IP parser:Henning Brauer
2003-01-05Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for tableDaniel Hartmeier
2003-01-04move noroute from flag in pf_rule_addr into type in pf_addr_wrap.Daniel Hartmeier
2003-01-04I do not know where this policy of "one .h file for every .c file" comesTheo de Raadt
2002-12-30Change ipv6-icmp-type to icpm6-type. pf.conf files will need to be adjustedRyan Thomas McBride
2002-12-18Store translation rule pointer in state entries, so pfctl -vsn can printDaniel Hartmeier
2002-12-17Match merge of pf_nat/pf_binat/pf_rdr structs into pf_ruleRyan Thomas McBride
2002-12-13allow a second queue for higher priorized (currently: tos=lowdelay) packetsHenning Brauer
2002-12-07Support parameters in anchor rules. Allows conditional evaluation, like:Daniel Hartmeier
2002-12-07shadow cleanupHenning Brauer