summaryrefslogtreecommitdiff
path: root/sbin/pfctl/pfctl_parser.c
AgeCommit message (Expand)Author
2003-02-25repair/simplify/flexify binat userland.Cedric Berger
2003-02-19Fix little buffer overflow on 64-bit platforms.Cedric Berger
2003-02-13when complaining about an illegal netmask print the value we're complainingHenning Brauer
2003-02-12Simplify the code and make the parser handle the different rule typesRyan Thomas McBride
2003-02-09Fix a few warnings and remove unnecessary check and cast.Camiel Dobbelaar
2003-02-08Add scrub option 'random-id', which replaces IP IDs with random valuesDaniel Hartmeier
2003-02-02no const for int; cedric@Henning Brauer
2003-02-02const'ify params for the host stuffHenning Brauer
2003-02-02as correctly pointed out by cedric@, the :network and :broadcast parsingHenning Brauer
2003-01-30in these two cases strdup makes more sense than asprintf, pointed out byHenning Brauer
2003-01-30add support for :network and :broadcast modifiers to interface names.Henning Brauer
2003-01-25Match changes for rdr port ranges made to pf.c:Ryan Thomas McBride
2003-01-20Improve pfctl -vvs{r,n} output with rule containing tables.Cedric Berger
2003-01-19Quote label in rule output.Camiel Dobbelaar
2003-01-18quite some KNF for the older partsHenning Brauer
2003-01-18host() overhaul:Henning Brauer
2003-01-17KNFMarkus Friedl
2003-01-14unified IP parser:Henning Brauer
2003-01-05Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for tableDaniel Hartmeier
2003-01-04move noroute from flag in pf_rule_addr into type in pf_addr_wrap.Daniel Hartmeier
2003-01-04I do not know where this policy of "one .h file for every .c file" comesTheo de Raadt
2002-12-30Change ipv6-icmp-type to icpm6-type. pf.conf files will need to be adjustedRyan Thomas McBride
2002-12-18Store translation rule pointer in state entries, so pfctl -vsn can printDaniel Hartmeier
2002-12-17Match merge of pf_nat/pf_binat/pf_rdr structs into pf_ruleRyan Thomas McBride
2002-12-13allow a second queue for higher priorized (currently: tos=lowdelay) packetsHenning Brauer
2002-12-07Support parameters in anchor rules. Allows conditional evaluation, like:Daniel Hartmeier
2002-12-07shadow cleanupHenning Brauer
2002-12-06let pfctl -v print out "block drop" instead of just "block" in the dropHenning Brauer
2002-12-06Introduce anchors and named rule sets, allowing to load additional ruleDaniel Hartmeier
2002-12-05one step further to "program output is valid program input" and the relatedHenning Brauer
2002-11-30move unmask back into pf_print_state.c where it was, and please keep it there...Michael Shalayeff
2002-11-28- Remove extra space before -> in print_rdrRyan Thomas McBride
2002-11-28- Adjust to match replacement of md5 with pf_hashRyan Thomas McBride
2002-11-23Cosmetic fixes for print_*() functions, so they match the old regressDaniel Hartmeier
2002-11-23fix parens "(" ")" when printingRyan Thomas McBride
2002-11-23KNFTheo de Raadt
2002-11-23Missing {}Daniel Hartmeier
2002-11-23check to make sure a list item exists before checking to see if the nextRyan Thomas McBride
2002-11-23missing prototype, remember to use sa_family_t for afRyan Thomas McBride
2002-11-23code to support loading of pf rules with multiple redirection addressesRyan Thomas McBride
2002-11-19minor cosmetics, space after "label %s", in case both label and queue areDaniel Hartmeier
2002-11-18KNFTheo de Raadt
2002-11-18altq and pf mergedHenning Brauer
2002-10-25- more sa_family_tCamiel Dobbelaar
2002-10-22More conversion of "int af" and "u_int8_t af" declarations and functionRyan Thomas McBride
2002-10-14Allow one to specify a netblock in a binat rule:Henning Brauer
2002-10-07set block-policy [drop|return]Henning Brauer
2002-10-07support a generic returnHenning Brauer
2002-10-07make return-icmp work for rules covering both v4 and v6Henning Brauer
2002-10-07Add 'reply-to' to filter rules, similar to route-to, but applying toDaniel Hartmeier