summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2002-07-05unbreak.Henning Brauer
2002-07-05another small bug I found while installing a -current pf firewall.Henning Brauer
2002-07-05allow unsetting the statusinterface viaHenning Brauer
2002-07-01streamline parse buffer handling (no need to copy value that is notMarc Espie
2002-07-01KNFTheo de Raadt
2002-06-28Don't check for address family conflicts in nat/rdr before expansion,Daniel Hartmeier
2002-06-27fix synopsis, closes pr2775Henning Brauer
2002-06-27repair formatting - the new "enabled since" format is longer than the oldHenning Brauer
2002-06-25move pfctl options -t, -m, -O and -l to pf.conf. These are set using theHenning Brauer
2002-06-24Use interface when specified in scrub rule. No support for ! or {} yet.Daniel Hartmeier
2002-06-23uid_t and gid_t are unsignedTheo de Raadt
2002-06-20Copy address family from inet/inet6 keyword, if specified.Daniel Hartmeier
2002-06-19"Enabled for Ss" -> "Enabled for D days HH:MM:SS", ok frantzen@Daniel Hartmeier
2002-06-18propogate a '!' when a host resolves to multiple IP addressesMike Frantzen
2002-06-18don't allow individual keep state rules to specify timeouts for 'interval' andMike Frantzen
2002-06-16Rules must in order -> Rules must be in orderAaron Campbell
2002-06-15Reset rulestate in parse_rules(), so consecutive calls (like from authpf)Daniel Hartmeier
2002-06-14make the output of pfctl -k look nice againHenning Brauer
2002-06-13Fix the numbering of scrub rules. pointed out and oked by frantzen@Kjell Wooding
2002-06-12this stuff really belongs to stderr, not stdoutHenning Brauer
2002-06-12Fix uninitialized access. Spotted by danh@ This is a good reason toKjell Wooding
2002-06-11split the grammar of scrub(fragcache) into scrub ... 'fragment reassemble',Mike Frantzen
2002-06-11Typo in err()Kjell Wooding
2002-06-11nuke an unused parameter in pfctl_timeout. ok frantzen@Kjell Wooding
2002-06-11Add -N, -RKjell Wooding
2002-06-11Add -N and -R options. When used in conjunction withKjell Wooding
2002-06-11sync with realityHenning Brauer
2002-06-11KNF, remove function parameter namesDaniel Hartmeier
2002-06-11Remove parse_nat() prototype, it's gone. Yes, authpf is broken at theDaniel Hartmeier
2002-06-11Add $OpenBSD, license, include guards and remove one superfluousDaniel Hartmeier
2002-06-11print a string for UDP and OTHER state level instead of a numeric levelMike Frantzen
2002-06-11SCRUB(fragcache) to do gap tracking and overlap pruning of IPv4 fragmentsMike Frantzen
2002-06-11sync usage() with realityHenning Brauer
2002-06-11Make NAT proxy port range configurable per rule, for instance privilegedDaniel Hartmeier
2002-06-11rework pfctl statistics displayHenning Brauer
2002-06-10Merge the NAT and rules files into a single rulefile. Rules must beKjell Wooding
2002-06-10Allow ports to be specified in nat rules, useful later on for individualDaniel Hartmeier
2002-06-10Move enum out of struct (gcc 3.1 wasn't happy), from David KrauseDaniel Hartmeier
2002-06-10some olde version piece crept into my diffski; pt out by dfa@Michael Shalayeff
2002-06-10split scrub rule processing into its own yacc target,Kjell Wooding
2002-06-09Make pf_nat.saddr/daddr a pf_rule_addr instead of pf_addr_wrap, so itDaniel Hartmeier
2002-06-09spaced out developers...Theo de Raadt
2002-06-09Add list parsing in RDR rules: e.g.Kjell Wooding
2002-06-09use strchr() instead of index()Theo de Raadt
2002-06-08nuke unused parameter af to expand_label_portHenning Brauer
2002-06-08Change remaining read-only lookup tables to const, suggestion drahn@Daniel Hartmeier
2002-06-08comment on IPv6 link-local twistsJun-ichiro itojun Hagino
2002-06-08pf_timeouts is shared between pfctl and authpf, put it in the shared file.Dale Rahn
2002-06-08add list expansion to src/dest in NAT rules. i.e.Kjell Wooding
2002-06-08remove macro concatenation via += per Theo's adviceHenning Brauer
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-11 18:50:55 +0000