summaryrefslogtreecommitdiff
path: root/sbin/pfctl/pfctl_parser.c
AgeCommit message (Expand)Author
2001-10-24Use snot/dnot correctly in print_rdr. RDR rules with '!' used on theDaniel Hartmeier
2001-10-15Add 'allow-opts' to rules. Packets with IP options will be blocked byDaniel Hartmeier
2001-10-04Honour -v flag when printing states, print only one line per state whenDaniel Hartmeier
2001-09-15Implement return-icmp(number), return-icmp6(number)Peter Stromberg
2001-09-15ICMP6_DST_UNREACH_NOROUTE <-> _ADMIN, reported by Wouter Coene.Daniel Hartmeier
2001-09-15IPv6 support from Ryan McBride (mcbride@countersiege.com)Mike Frantzen
2001-09-061:1 bidrectional NAT (binat); ok dhartmei@ and frantzen@jasoni
2001-09-02Print rule numbers zero-based. Noted by primus@gblx.net.Daniel Hartmeier
2001-08-25PF ISN randomization. Or in trekkie techno-babble, ISN phase modulation.Mike Frantzen
2001-08-23KNFTheo de Raadt
2001-08-19Unfuck some TCP state stuff that would drop the SYN|ACK.Mike Frantzen
2001-08-18prettier printing of statesTheo de Raadt
2001-08-16track the line number per-token, so that we can report errors correctlyTheo de Raadt
2001-08-11Add support for ICMP errors referring to ICMP queries/replies. FixesDaniel Hartmeier
2001-07-19Fix/complete the handling of the binary ops >< and <> to behaveKenneth R Westerback
2001-07-17markus doesnt like min-ttl =, begoneNiels Provos
2001-07-17support min-ttl, okay dhartmei@Niels Provos
2001-07-17normalize ip_off, make IP_DF stripping optional, return rst is a flag now.Niels Provos
2001-07-16add a yacc parser for pf.conf and nat.conf, with help from mickey@,Markus Friedl
2001-07-11Error on invalid portsConstantine Sapuntzakis
2001-07-10Oops, we can't use 0 as next_addr()'s error return since 0.0.0.0 isTodd C. Miller
2001-07-10Resolve as a host name if not an IP address; dhartmei@ OKTodd C. Miller
2001-07-10move "proto" in the nat case as wellTodd C. Miller
2001-07-09Move the proto field to be after the "on" argument which is consistentTodd C. Miller
2001-07-09Extend nat/rdr syntax. Add source/destination selection. MakeDaniel Hartmeier
2001-07-06Allow negative match on interface name for nat and rdrChris Cappuccio
2001-07-04cleanerTheo de Raadt
2001-07-04add new icmp codes and types as symbolic names, ok deraadtPeter Stromberg
2001-07-01tag packets generated by pf (return-rst, return-icmp) so they are not filtere...Daniel Hartmeier
2001-07-01Add port ranges to the rdr directive. Connections can be redirectedKjell Wooding
2001-07-01Always print filter statistics, even when the filter is disabled.Kjell Wooding
2001-06-29fix counter/reason array usageDaniel Hartmeier
2001-06-28support scrub directive. somebody please please BNF yaccify this.Niels Provos
2001-06-27print inbound packets passed correctlyDaniel Hartmeier
2001-06-27state counter changesTheo de Raadt
2001-06-27make it understand protocol numbers, tooNiels Provos
2001-06-26name comparison operatorsDug Song
2001-06-26int -> unsigned, so -Wall is happyDaniel Hartmeier
2001-06-26array of counters indexed by reason codesTheo de Raadt
2001-06-26add rule nr for NielsDaniel Hartmeier
2001-06-26add rule pointer and log option to statesDaniel Hartmeier
2001-06-26Print statistics in a human readable format. ok dhartmeiKjell Wooding
2001-06-26symbolic names for icmp-type and codes, ok deraadt@Peter Stromberg
2001-06-26add space after line number; wilfried@Daniel Hartmeier
2001-06-26allow 0.0.0.0/x in rulesPeter Stromberg
2001-06-25more sync against kernel changesTheo de Raadt
2001-06-25catch up, might have introduced bugs, but there is a next pass...Theo de Raadt
2001-06-25catch up to Art changes in the kernelTheo de Raadt
2001-06-25Replace magic numbers 1, 6, and 17 with IPPROTO_{ICMP,UDP,TCP}. deraadt@ ok.smart
2001-06-24some KNFNiels Provos