summaryrefslogtreecommitdiff
path: root/sbin/pfctl/pfctl_parser.h
AgeCommit message (Expand)Author
2003-08-21Add Michal Zalewski's p0f v2 style passive OS fingerprinting to PF.Mike Frantzen
2003-07-31Make table tickets per-ruleset instead of global.Cedric Berger
2003-07-18Simplify handling of flags (-R, -N...). Remove PFCTL_FLAG_ALL.Cedric Berger
2003-07-11Better parsing and -v support for tables:Cedric Berger
2003-07-03Bye bye atexit(), bye bye globals...Cedric Berger
2003-07-03This patch finally cleanup pfctl_table.c. No more global buffer,Cedric Berger
2003-05-19reject invalid netmasks like 10.0.0.0/68, and fix up the netmask forHenning Brauer
2003-05-10support loading of anchors from within the main ruleset viaHenning Brauer
2003-04-30Allow tables to be loaded into anchors.Cedric Berger
2003-04-15pass down the unparsed queue opts (struct node_queue_opt) toHenning Brauer
2003-04-14let print_altq and print_queue take a struct node_queue_bw parameter insteadHenning Brauer
2003-04-13new struct node_hfsc_opts for, surprise, hfsc options. needed because theyHenning Brauer
2003-04-13pass down the struct node_queue_opts from the altqif/queuespec yacc targetsHenning Brauer
2003-04-13move the structs node_queue_bw and node_queue_opt to pfctl_parser.h.Henning Brauer
2003-04-05ease netmask handling a bitHenning Brauer
2003-04-03Simplify pfctl printing code.Cedric Berger
2003-03-27lotsa const char *Henning Brauer
2003-03-07don't include debugging output, namely, the result of teh skip stepsHenning Brauer
2003-02-18fix load option handling (-A, -N, -R) for options.Henning Brauer
2003-02-16cosmeticsHenning Brauer
2003-02-03remove loadopt global definition and cleanup a bit.Cedric Berger
2003-02-03fix a problem with queue definitions when load options (like -N etc) areHenning Brauer
2003-02-02there is no need to pass opts to parse_rules explicitely; it's passed asHenning Brauer
2003-02-02const'ify params for the host stuffHenning Brauer
2003-01-25Fix NOACTION with table statements.Cedric Berger
2003-01-25Permit initialisation of a table content from a file in pf.conf.Cedric Berger
2003-01-18Cleanup PF_OPT_NOACTION with tables. No changes on current behaviour,Cedric Berger
2003-01-14unified IP parser:Henning Brauer
2003-01-09Add support for active/inactive tablesets in the kernel.Cedric Berger
2003-01-04I do not know where this policy of "one .h file for every .c file" comesTheo de Raadt
2002-12-22Instead of inserting and removing rules at the top/bottom of the mainDaniel Hartmeier
2002-12-18Store translation rule pointer in state entries, so pfctl -vsn can printDaniel Hartmeier
2002-12-18Maintain separate pfioc_rule structures for each type of rule,Ryan Thomas McBride
2002-12-17Match merge of pf_nat/pf_binat/pf_rdr structs into pf_ruleRyan Thomas McBride
2002-12-05one step further to "program output is valid program input" and the relatedHenning Brauer
2002-12-04do not warn for unused variables except with -v -v; henning okTheo de Raadt
2002-11-30move damn unmask() proto into place as wellMichael Shalayeff
2002-11-28- Adjust to match replacement of md5 with pf_hashRyan Thomas McBride
2002-11-23missing prototype, remember to use sa_family_t for afRyan Thomas McBride
2002-11-23code to support loading of pf rules with multiple redirection addressesRyan Thomas McBride
2002-11-18altq and pf mergedHenning Brauer
2002-10-25- more sa_family_tCamiel Dobbelaar
2002-06-25move pfctl options -t, -m, -O and -l to pf.conf. These are set using theHenning Brauer
2002-06-11Add -N and -R options. When used in conjunction withKjell Wooding
2002-06-11Remove parse_nat() prototype, it's gone. Yes, authpf is broken at theDaniel Hartmeier
2002-06-11Make NAT proxy port range configurable per rule, for instance privilegedDaniel Hartmeier
2002-06-11rework pfctl statistics displayHenning Brauer
2002-06-08Change remaining read-only lookup tables to const, suggestion drahn@Daniel Hartmeier
2002-06-08Make state timeouts configurable per rule, likeDaniel Hartmeier
2002-06-07allow using $srcaddr, $srcport, $dstaddr and $dstport in rule labels,Henning Brauer