summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2005-02-17Fix indentation as to not mislead the code reader. No functional change.Aaron Campbell
2005-02-07KNF; ok henning@David Krause
2005-01-28add messages for syntax errors that caused silent failure before.Daniel Hartmeier
2005-01-27dynamic interface names must start with a letter. catches the nonsensicalDaniel Hartmeier
2005-01-06Missing braces in pfctl_load_debug(), pointed out by camield@Ryan Thomas McBride
2005-01-05spelling;Jason McIntyre
2005-01-05Document -m flag.Ryan Thomas McBride
2005-01-05Modify pfctl behaviour so that 'set ...' options are no longer "sticky", ie.Ryan Thomas McBride
2005-01-03don't merge a rule's source address into a table if we're already trying toMike Frantzen
2004-12-29Print 'set fingerprints' correctly when parsing verbosely.Ryan Thomas McBride
2004-12-29Make sure that fingerprint_count gets reset to 0 correctly when we flushRyan Thomas McBride
2004-12-29change last commit so that the test for PF_OPT_NOACTION is actually inDan Harnett
2004-12-29don't clear interface flags if '-n' option was given.Dan Harnett
2004-12-29be quiet about resetting the interface flags omn ruleset load, onlyHenning Brauer
2004-12-28reset skip interface flags on reloads and for -FallHenning Brauer
2004-12-27unbreak treeTheo de Raadt
2004-12-27reset skip interface flags on reloads and for -FallHenning Brauer
2004-12-23set rule_flag PFRULE_SRCTRACK when setting srctrack, found by camield@Daniel Hartmeier
2004-12-22Introduce 'set skip on <ifspec>' to support a list of interfaces where noDaniel Hartmeier
2004-12-19use strchr instead of indexTheo de Raadt
2004-12-15missing free()s; with patHenning Brauer
2004-12-14&&/|| inversion would try to merge IP addresses with non-addresses into aMike Frantzen
2004-12-14add two warn() calls to make sure a warning message gets printed if one ofMike Frantzen
2004-12-13sync authpf anchor syntax;Jason McIntyre
2004-12-10allow pf to filter on route labelsHenning Brauer
2004-12-08Add "'overload' requires 'max-src-conn' or 'max-src-conn-rate'" sanity check,Ryan Thomas McBride
2004-12-07re-commit mcbride@'s 'flush global', this time without the breakage inDaniel Hartmeier
2004-12-07real backoutTheo de Raadt
2004-12-07oops, incomplete backoutTheo de Raadt
2004-12-07tree does not compile, spotted by dlg (not obvious how to fix)Theo de Raadt
2004-12-07Change the default for 'overload <table> flush' to flush only states from theRyan Thomas McBride
2004-12-05initialize $$->tail and $$->next for MAXSRCCONNRATEDaniel Hartmeier
2004-12-04Userland support for limiting open tcp connections per source. eg:Ryan Thomas McBride
2004-11-09do not assume entries in pf_timeouts[] are ordererd like PFTM_* in pfvar.hDaniel Hartmeier
2004-09-30print invalid hostmask when refusing it, ok deraadt@Daniel Hartmeier
2004-09-27anchor rules referencing anchors using slashes may need quotes.Jared Yanovich
2004-09-21Implement "no scrub" to allow exclusion of specific traffic from scrub rules.Aaron Campbell
2004-08-26sync usage for -aJared Yanovich
2004-08-26update w.r.t. recursive anchorsJared Yanovich
2004-08-08spacingTheo de Raadt
2004-07-23- make SYNOPSIS and usage() clear that -t precedes -T;Jason McIntyre
2004-07-19print the correct labels when displaying timeouts with pfctl (eg, pfctl -st).David Gwynne
2004-07-16'pfctl -o' ruleset optimizer that doesnt change the meaning of the final rulesetMike Frantzen
2004-06-29remove cedric's bogus interface name verification code.Henning Brauer
2004-06-29convert a few memcpy()s to strlcpy() so we don't copy uninitialized junk intoMike Frantzen
2004-06-26add back PF_INOUT, fixes reassemble tcpDavid Krause
2004-06-25repair tree nanobreak by the nanobumTheo de Raadt
2004-06-21Update manpage to reflect changes in anchor namingMathieu Sauve-Frankel
2004-06-14Remove unused functions. ok beck@ henning@Cedric Berger
2004-06-12Fix table add/replace commands with securelevel=2.Cedric Berger