summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2003-02-14remove explicit table creation ( -T create ), it's useless.Henning Brauer
2003-02-14Allow route-to loopback interfaces again, since Ryan fixed the loops thatDaniel Hartmeier
2003-02-14English and mdoc fixes thanks to jmc@Cedric Berger
2003-02-14Better and more consistent error message.Cedric Berger
2003-02-14tweakHenning Brauer
2003-02-14Document verbose mode with tables (statistics).Cedric Berger
2003-02-14more good tweaks by krauseHenning Brauer
2003-02-13when complaining about an illegal netmask print the value we're complainingHenning Brauer
2003-02-13ease the yacc a bit by using a "not" rule instead of having two rules w/ andHenning Brauer
2003-02-13when talking about the order requirement, mention all 7 sections we have now.Henning Brauer
2003-02-12KNF after ryanHenning Brauer
2003-02-12Simplify the code and make the parser handle the different rule typesRyan Thomas McBride
2003-02-11document pfctl -D macro=valueHenning Brauer
2003-02-11allow macro definition on the command line:Henning Brauer
2003-02-09more live code from FOSDEM:Henning Brauer
2003-02-09KNFHenning Brauer
2003-02-09Fix a few warnings and remove unnecessary check and cast.Camiel Dobbelaar
2003-02-08Add scrub option 'random-id', which replaces IP IDs with random valuesDaniel Hartmeier
2003-02-08Add an example of "pfctl -a anchor -s rules" usage, and make it clearDaniel Hartmeier
2003-02-05Fix "pass out dup-to (tun0 1.1.1.1) inet6 all" error messageCedric Berger
2003-02-05Simplify more.Cedric Berger
2003-02-05Simplify.Cedric Berger
2003-02-05Do not scare ppl too much.Cedric Berger
2003-02-05Set the network mask to all 1's if no address is specified for aRyan Thomas McBride
2003-02-04use size_t for struct size and offset calculations.Cedric Berger
2003-02-04Cleanup buffer before reuse. Consistency + defensive programming.Cedric Berger
2003-02-03prettyTheo de Raadt
2003-02-03Don't allow loopback interfaces as route/reply/dup-to targets. ok henning@Daniel Hartmeier
2003-02-03remove loadopt global definition and cleanup a bit.Cedric Berger
2003-02-03zap dead codeHenning Brauer
2003-02-03fix a problem with queue definitions when load options (like -N etc) areHenning Brauer
2003-02-03More cleanup in tables thanks to Andrey Matveev:Cedric Berger
2003-02-02there is no need to pass opts to parse_rules explicitely; it's passed asHenning Brauer
2003-02-02no const for int; cedric@Henning Brauer
2003-02-02const'ify params for the host stuffHenning Brauer
2003-02-02as correctly pointed out by cedric@, the :network and :broadcast parsingHenning Brauer
2003-01-30in these two cases strdup makes more sense than asprintf, pointed out byHenning Brauer
2003-01-30add support for :network and :broadcast modifiers to interface names.Henning Brauer
2003-01-28typos; added white boldface to examplesJason McIntyre
2003-01-27bit KNFHenning Brauer
2003-01-27KNFTheo de Raadt
2003-01-27When -a is specified, the operation affects an anchor only, so don't tryDaniel Hartmeier
2003-01-25Another nice cleanup patch from Andrey MatveevCedric Berger
2003-01-25Match changes for rdr port ranges made to pf.c:Ryan Thomas McBride
2003-01-25Fix NOACTION with table statements.Cedric Berger
2003-01-25Permit initialisation of a table content from a file in pf.conf.Cedric Berger
2003-01-25Correctly check illegal constructs with tables. Better error messages.Cedric Berger
2003-01-25tables are just tables; implementation details (radix) don't need to beHenning Brauer
2003-01-25if a table name ist too long, it's actually nice to tell so instead of justHenning Brauer
2003-01-25kill whitespace at EOLHenning Brauer