summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Collapse)Author
2003-03-08Remove unneeded #includes, from Andrey Matveev andrushock(at)pisem(dot)netDaniel Hartmeier
2003-03-08fix the obvious:Henning Brauer
since we do not modify the struct pf_altq *a any more but our private copy, we can of course not inherit teh scheduler type from it, since it did not inherit the scheduler type from the parent. so just inherit the scheduler type from the parent directly... ok dhartmei@ cedric@
2003-03-08in expand_queue, make a private copy of the struct pf_altq before modifyingHenning Brauer
it. modifying the original one had undesired side effects if a queue was expanded to more than one because it belonged to more than one interface ok pb@ cedric@ dhartmei@
2003-03-08when complaining about a queue's abndwidth beeing to small (below theHenning Brauer
resolution we can handle), don't say it must be >6KB, the value actually depends on quite some factors, including interface MTU. Instead, calculate the real minimum value and show that. mpech@ did a good job in bugging me to fix that ;-) ok pb@ dhartmei@ cedric@
2003-03-08inlcude queue interals in -gsr and -gsq output; will make debugging easier.Henning Brauer
ok cedric@ pb@
2003-03-07Only show non-active tables when the -g flag is given.Cedric Berger
ok dhartmei@ henning@
2003-03-07document -gHenning Brauer
ok jmc@
2003-03-07don't include debugging output, namely, the result of teh skip stepsHenning Brauer
calculation, in verbose output (pfctl -vvsr). Instead, use a new flag -g for that. result of a longer discussion with dhartmei@ and jakob@ ok cedric@ pb@
2003-03-06fix queue assignment on filter rules which are not bound to an interface.Henning Brauer
when looking up the queue IDs using qname_to_qid, we do not need to limit the matching on the interface in question, as it is guaranteed that same named queues on different interfaces habe the same queue id. moreover, we must not limit the matches to the interface if we do not have an interface given on the filter rule to match on ;-) found after problems reported by Andre Nathan <andre at v2r dot com dot br> ok dhartmei@ pb@ cedric@
2003-03-06tweak wording and mdoc formattingDavid Krause
ok jmc@ henning@
2003-03-04wrap Ic in Xo/Xc until fixedTheo de Raadt
2003-03-03rate2str() overhaul:Henning Brauer
-do not print 100.00Kb but 100Kb, but still 1.50Mb. requested by theo. hint by dhartmei lead to a easier algorithm than initially had -while beeing there, use a much nicer, shorter algorithm for determining and printing the unit. a little further easification thanks to a hint by markus@ ok dhartmei@ cedric@
2003-03-02when printing queues at load time that have bandwidth specified in percent,Henning Brauer
print the bandwidth in percent instead of the calculated absolute value. if a queue belongs to more than one interface and they have different bandwidth the calculated absolute is of course different per interface. previously the first calculated absolute value was shown; what of course is incorrect on the second interface. note that only the print was wrong, the correct values were passed to the kernel. ok theo daniel
2003-03-02remove the control keyword for cbq queues.Henning Brauer
the control class was a legacy of the original CBQ design by LBL/Sun to support RSVP. the control class is not used in openbsd, in the sense that we don't automatically set filters for ICMP/IGMP/RSVP for the control class. ok dhartmei@ kjc@ deraadt@
2003-03-02add a guarantee that two same named queues on different interfaces have theHenning Brauer
same queue id. in the usual case this was already true, but not guaranteed. ok dhartmei@ kjc@
2003-02-27modify error message to match the same 7 sections in pf.conf(5)David Krause
ok deraadt@ henning@
2003-02-26in expand_rule, correctly set r->pqid if a priority queue was defined, andHenning Brauer
reuse the value of r->qid if not. ok dhartmei@ mcbride@
2003-02-25some minor KNF my fingers just did...Henning Brauer
ok dhartmei@ cedric@
2003-02-25repair/simplify/flexify binat userland.Cedric Berger
ok dhartmei@ henning@
2003-02-25extend copyright to 2003Henning Brauer
2003-02-24when a macro is redefined, don't bother with reusing the existing entry inHenning Brauer
symset() but just prepend a new sym entry to symhead like we always did. as symget searches the list sequentially, the newest one is picked first. prevents an endless loop introduced when trying to reuse the existing entry by an invalid setting for the next pointer. fixes regress test pf57. found after conversation with Chris Linn, celinn at mtu dot edu ok dhartmei@ cedric@
2003-02-24echo->printf, because echo does not accept "\n" in all shells.Cedric Berger
ok henning@
2003-02-21re-allow set loginterface noneHenning Brauer
ok cedric@ dhartmei@
2003-02-21better error message if set loginterface is called with nonexistantHenning Brauer
interface, found by krause (who is doing EXCELLENT work. Thank you very much!), fix by me, ok dhartmei@ and cedric@
2003-02-20extra plurals; openbsd@davidkrause.comTheo de Raadt
2003-02-20Fix table syntax documentation, from David Krause.Cedric Berger
2003-02-20reject nonexistant interfaces in the dynaddr case, noticed during discussionHenning Brauer
with jasondixon at myrealbox dot com ok dhartmei@
2003-02-19Make 'from (kue0)/24' work again (dynamic interface name translation withDaniel Hartmeier
a /prefix), reported by Jason Dixon. ok henning@
2003-02-19better error message on icmp version / address family mismatchHenning Brauer
ok markus@
2003-02-19cmdline options in alphabetical order in usage() and manpage; and sync themHenning Brauer
from krause
2003-02-19Fix little buffer overflow on 64-bit platforms.Cedric Berger
Produce wrong output on pfr7 regression test, discovered by henning@. ok+testing henning@
2003-02-19clarify how pfctl -k works a bit; based on a discussion with daniel and samHenning Brauer
smith. ok dhartmei@
2003-02-18fix load option handling (-A, -N, -R) for options.Henning Brauer
due to a bug in the loadopt check options were always loaded no matter which loadopts where specified. while beeing there, move the prints for that to where they belong, into the appropriate pfctl_set_* functions, and thus only print when the options are actually loaded. fixes regress tests pfopt3, pfopt4, pfopt5 I added earlier. ok dhartmei@
2003-02-17pfctl_clear_pool doesn't need to be prototyped twice eitherHenning Brauer
2003-02-17no need to prototype pfctl_add_pool twiceHenning Brauer
2003-02-17"optarg" was a bad pick for the variable name in pfctl_cmdline_symset, itHenning Brauer
shadows a global. rename.
2003-02-17We want err() after failed ioctl() here too.Mike Pechkin
mcbride@, dhartmei@ ok
2003-02-17-#include <sys/ioctl.h>Mike Pechkin
mcbride@, dhartmei@ ok
2003-02-16unneeded {}Henning Brauer
2003-02-16throw a syntax error if the portunary operator in varset is no '='Henning Brauer
extif>"whatever" should not be the same as extif="whatever" but a syntax error.
2003-02-16cosmeticsHenning Brauer
2003-02-14remove explicit table creation ( -T create ), it's useless.Henning Brauer
ok pb@ mcbride@ deraadt@
2003-02-14Allow route-to loopback interfaces again, since Ryan fixed the loops thatDaniel Hartmeier
might have occured before.
2003-02-14English and mdoc fixes thanks to jmc@Cedric Berger
2003-02-14Better and more consistent error message.Cedric Berger
Ok dhartmei@
2003-02-14tweakHenning Brauer
2003-02-14Document verbose mode with tables (statistics).Cedric Berger
2003-02-14more good tweaks by krauseHenning Brauer
2003-02-13when complaining about an illegal netmask print the value we're complainingHenning Brauer
about
2003-02-13ease the yacc a bit by using a "not" rule instead of having two rules w/ andHenning Brauer
without '!' everywhere ok dhartmei@