summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2019-10-17Use -1 to indicate an invalid uid/gid, not UID_MAX and GID_MAX.Todd C. Miller
2019-08-26Fix file descriptor leak due to popfile() never closing the main config file.tobhe
2019-08-15pfctl_reset() must set syncookies settings back to defaultAlexandr Nedvedicky
2019-07-09Add parentheses for readabilitykn
2019-07-05Fix integer sizes in format strings and enable formatting warningsPatrick Wildt
2019-06-28When system calls indicate an error they return -1, not some arbitraryTheo de Raadt
2019-05-08pfctl should check pfctl.astack is not overrunAlexandr Nedvedicky
2019-05-08update to PF pfctl(8) and pf.conf(5) manpagesAlexandr Nedvedicky
2019-04-18Always check for namespace collisions on table commandskn
2019-04-18Fix table definition parsing as unprivileged userkn
2019-04-15introduce 'pfctl -FR' to reset settings to defaultsAlexandr Nedvedicky
2019-03-30Fail on invalid netmasks when filling tableskn
2019-03-07Remove pfctl_*_pool() remnantskn
2019-03-06Fix once ruleskn
2019-02-18Change ps_len of struct pfioc_states and psn_len of structAlexander Bluhm
2019-02-13(unsigned) means (unsigned int) which on ptrdiff_t or size_t or otherTheo de Raadt
2019-02-10Anchor names must not be emptykn
2019-02-10Unify anchor name sanity checkskn
2019-02-02Show the routing address selected by "route-to" in "pfctl -s states".YASUOKA Masahiko
2019-01-31Make divert-packet port accept any port specificationkn
2019-01-29Reuse copy_satopfaddr() when killing entrieskn
2019-01-29Make -N and -r mutually exclusivekn
2019-01-28Simplify lookups when killing entrieskn
2019-01-26Mention that -r does reverse DNS lookups for tables as wellkn
2019-01-19Use mnemonic PFCTL_SHOW_* macros, terminate string with null characterkn
2019-01-11Defuse `-F all -i interface'kn
2019-01-11When creating tables inside anchors, pfctl warned about namespacekn
2019-01-10Zap unnused iface function parameter from pfctl_kill_src_nodes()kn
2019-01-03Unbreak build under OPT_DEBUGkn
2019-01-02Error out on missing table command, zap internal wrapper functionkn
2019-01-02Zap unused segment struct definitionkn
2018-12-31Explicitly mention that tables created by -T{add,replace} are persistentkn
2018-12-27Zap duplicate struct declarationkn
2018-12-21DIOCIGETIFACES provides interfaces and groups, not driverskn
2018-11-15scrub opts dont set tos, so remove it from the scrub_opts structDavid Gwynne
2018-11-10Unbreak `-D macro=value' (r1.686 regression)kn
2018-11-07sync cmdline_symset() changes with src/usr.sbin; OK sashan@ claudio@miko
2018-11-01- odd condition/test in PF lexerAlexandr Nedvedicky
2018-10-15use PFR_RB_NONE consistentlykn
2018-09-18fix table commands under anchorskn
2018-09-16The kernel does not set the address family for the socket addressesAlexander Bluhm
2018-09-16Use uid_from_user(3) and gid_from_group(3) in utilities thatTodd C. Miller
2018-09-13Avoid unneeded variable in gen_dynnode()kn
2018-09-11Fix netmask regression in get_dynnode()kn
2018-09-11Remove unused buffer from host()kn
2018-09-10Merge host_v{4,6}() into simpler host_ip()kn
2018-09-10Introduce copy_satopfaddr()kn
2018-09-08Allocate path only when needed, use __func__kn
2018-09-08Error out early on bad anchor usagekn
2018-09-07More __func__ to fix error messageskn