summaryrefslogtreecommitdiff
path: root/sbin/pfctl/pfctl_parser.c
AgeCommit message (Expand)Author
2014-01-20support "!received-on <interface>", ok dlg bennoHenning Brauer
2013-11-22Whole bunch of (unsigned char) casts carefully added for ctype calls.Theo de Raadt
2013-10-28use %d instead of %i in a few fprintf for clarityTheo de Raadt
2013-10-12config bits for the bandwidth shaping part of the new queueing subsystemHenning Brauer
2013-08-01Provide local implementations of if_nametoindex(3) and if_indextoname(3)Mike Belopuhov
2013-04-21avoid truncating a time_t division into daysTheo de Raadt
2013-01-16for consistency with prio etc, the queue assignment really belongsHenning Brauer
2012-12-04remove some unnecessary sys/param.h inclusionsTheo de Raadt
2012-09-18prio 0 is valid, therefore, I chose an "impossible" value for prio meaningHenning Brauer
2012-07-10use PFSTATE_SCRUBMASKHenning Brauer
2012-07-10intermediate hack^Wugly "fix" to prevent spurious "scrub ()" printsHenning Brauer
2012-07-10set { ... } -> set ( ... )Henning Brauer
2012-07-09fix some of the confusion we have in pf regarding filter criteria vsHenning Brauer
2012-07-07rename prio in struct pf_rule and related structs to set_prio so it isHenning Brauer
2011-12-12fixup af-to regression with match rulesMike Belopuhov
2011-11-23print ports as numbers by default; -P prints names insteadHenning Brauer
2011-11-23print_rule: rename opts -> ropts, no binary changeHenning Brauer
2011-10-13pfctl change for af-to / NAT64 support.Claudio Jeker
2011-08-30One shot rules can be used in pf.conf by specifying a "once" filter option.Mike Belopuhov
2011-07-27Add support for weighted round-robin in load balancing pools and tables.Ryan Thomas McBride
2011-07-08allow rules to specify "prio X" or "prio (X, Y)" to assign priority levelsHenning Brauer
2011-07-07Don't print 'keep state' anymore unless it's needed for state options, it'sRyan Thomas McBride
2011-07-03bring in least-states load balancing algorithmJoerg Zinke
2011-04-06Userland bits to allow PF to filter on the rdomain a packet belongs to.Claudio Jeker
2011-04-05ditch fastroute, an ipf feature that made its way into pf beforeMike Belopuhov
2011-01-23'pfctl -x none' did not turn debugging off. Skip the syslog internalAlexander Bluhm
2010-10-12pfctl -sr did not show divert-reply rules without address familyAlexander Bluhm
2010-09-22new log opt "matches"Henning Brauer
2010-09-02remove trailing spaces and tabs; no binary change.Igor Sobrado
2010-07-13Fix (pflow) display in rule printing. Spotted by dhill@, ok henning@Stuart Henderson
2010-07-03Fix a couple of problems with printing of anchors, in particular recursiveRyan Thomas McBride
2010-07-03Use our own enum here rather than abusing the PF rule type enums, whichRyan Thomas McBride
2010-06-29Fix use after free. Found by regress tests.Charles Longeau
2010-05-16plug memory leak. `ps' was allocated with strdup(3), but on error pathzinovik
2010-03-22Following diff fixes memory leak. `debug' is allocated via asprintf(3) so weTheo de Raadt
2010-03-18Fix rdr-to printing in pfctl -sr when reply-to is in use.Stuart Henderson
2010-01-18Convert pf debug logging to using log()/addlog(), a single standardisedRyan Thomas McBride
2010-01-13repair a double-free suggested by parfait; ok mcbrideTheo de Raadt
2010-01-13fix some leaks found by parfaitJonathan Gray
2010-01-12Only print route specs with @if notation if there is an IP address.Ryan Thomas McBride
2010-01-12Unbreak 10/8 and friends.Ryan Thomas McBride
2010-01-12Fix some issues in redir spec handling, discovered thanks to dlg testingRyan Thomas McBride
2010-01-12First pass at removing the 'pf_pool' mechanism for translation and routingRyan Thomas McBride
2009-12-24spelling fixes, from Brad Tilley; we will not fix src/sbin/dump/dump.hIgor Sobrado
2009-12-24add support to pf for filtering a packet by the interface it was receivedDavid Gwynne
2009-12-14fix sticky-address - by pretty much re-implementing it. still followingHenning Brauer
2009-11-23since "nat/rdr pass" are history natpass can goHenning Brauer
2009-11-22cleanup after the NAT changes. we used to have multiple rulesets (scrub,Henning Brauer
2009-10-28Add a dedicated pf pool for route options as suggested by henning,Jonathan Gray
2009-10-04Add (again) support for divert sockets. They allow you to:Michele Marchetto