summaryrefslogtreecommitdiff
path: root/sbin/pfctl/pfctl_parser.c
AgeCommit message (Expand)Author
2024-04-22Show pf fragment reassembly counters.Alexander Bluhm
2024-02-07fix anchortypes bounds testJonathan Gray
2023-10-26whitespace cleanup my fingers couldn't avoid doing while i was re-readingTheo de Raadt
2023-04-18Rewrite some ugly for loopsTheo Buehler
2022-11-09simplify expiration of 'once' rules.Alexandr Nedvedicky
2021-02-01change route-to so it sends packets to IPs instead of interfaces.David Gwynne
2021-01-12Sometimes a user ID was logged in pflog(4) although the logopt ofAlexander Bluhm
2020-12-29getifaddrs() can return entries where ifa_addr is NULL. Check for thisSebastian Benoit
2020-05-15pf(4): use CLOCK_BOOTTIME to get time_uptime(9) in userspacecheloha
2019-10-17Use -1 to indicate an invalid uid/gid, not UID_MAX and GID_MAX.Todd C. Miller
2019-06-28When system calls indicate an error they return -1, not some arbitraryTheo de Raadt
2019-03-30Fail on invalid netmasks when filling tableskn
2019-01-29Reuse copy_satopfaddr() when killing entrieskn
2018-09-16The kernel does not set the address family for the socket addressesAlexander Bluhm
2018-09-13Avoid unneeded variable in gen_dynnode()kn
2018-09-11Fix netmask regression in get_dynnode()kn
2018-09-11Remove unused buffer from host()kn
2018-09-10Merge host_v{4,6}() into simpler host_ip()kn
2018-09-10Introduce copy_satopfaddr()kn
2018-09-07More __func__ to fix error messageskn
2018-09-07Remove wildcard address on loopack remnantskn
2018-09-06Remove unused af argument from unmask()kn
2018-09-05Move AF-specific mask logic from callers into set_ipmask()kn
2018-09-05Use error label in host_if()kn
2018-08-10Zap bits in host_v4(), use mask parameterkn
2018-07-31Zap v4mask and v6mask in host()kn
2018-07-30Simplify host()kn
2018-07-28Use strtonum in host()kn
2018-07-24Move duplicate code into new helper print_addr_str()kn
2018-07-24Simplify getaddrinfo() error handlingkn
2018-07-10'set delay' for the generic packet delay mechanism, ok benno sashanHenning Brauer
2018-07-10Add "listenrepv2" for MLDv2 Listener Reports from RFC3810Jeremie Courreges-Anglas
2018-02-08show current synflood detection watermarks in pfctl -vsi, for the lackHenning Brauer
2017-11-28The divert structure was using the port number to indicate thatAlexander Bluhm
2017-11-13add a generic packet rate matching filter. allows things likeHenning Brauer
2017-08-14expose the half-open tcp states counter, ok bluhmHenning Brauer
2017-08-11add option -N (no domain resolution)Sebastian Benoit
2017-08-03Since nearly 20 years the correct spelling ofFlorian Obser
2017-07-19Allow HFSC classes to use flow queuesMike Belopuhov
2017-06-01Return time_uptime as value for when pf was enabled instead ofPatrick Wildt
2017-05-15Fixup printing of queue bandwidth specificationsMike Belopuhov
2017-05-15Hook up FQ-CoDel to the tree and enable configuration in the pfctl(8)Mike Belopuhov
2016-10-26When using a /32 IPv4 interface address, pfctl(8) reports a 0.0.0.0Alexander Bluhm
2016-09-03Let purge thread to remove once rules, not packets.Alexandr Nedvedicky
2016-08-26Add <time.h> for time(); sort <*.h> includesPhilip Guenther
2015-09-03interface should only be specified for root queues; found by jsgMike Belopuhov
2015-06-03Do not assume that asprintf() clears the pointer on failure, whichTodd C. Miller
2015-02-14Rather than using 0xff as a placeholder for "don't check prio", use 0xff toStuart Henderson
2015-02-10since we inherit prio (as in, the queuing priority) from outside sources,Henning Brauer
2015-02-07parse debug levels with strtonum, so that debug 1banana doesn't parse.Ted Unangst