summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2003-05-19Use a decaying average for smoother rate estimates.Camiel Dobbelaar
2003-05-18indent here in the same way as in -vsr for consistencyHenning Brauer
2003-05-18in the pfctl -vsr output (-vvsr/-gvvsr as well), indent instead of extraHenning Brauer
2003-05-17Fix proxy related output.Daniel Hartmeier
2003-05-17A little bugfix. We want pfioc_states, not pfioc_state.Ryan Thomas McBride
2003-05-17support inverse matching on tags likeHenning Brauer
2003-05-16TCP SYN proxy. Instead of 'keep state' or 'modulate state', one can useDaniel Hartmeier
2003-05-15properly complain about too long tagsHenning Brauer
2003-05-14add scrub modifier "reassemble tcp" to turn on stateful TCP normalizationsMike Frantzen
2003-05-14tagging on binatHenning Brauer
2003-05-14enabled tagging on rdr rulesHenning Brauer
2003-05-14with tag/tagged given, only whine about missing keep state on pass rulesHenning Brauer
2003-05-14allow SCRUB rules to specify protocol again. broken sometime in the past.Mike Frantzen
2003-05-14tags on nat rules:Henning Brauer
2003-05-14print the redirection target for nat/rdr/binat slighly later.Henning Brauer
2003-05-13make sure tagging is only ever used with stateful filter rulesHenning Brauer
2003-05-13correct rule printingHenning Brauer
2003-05-13userland part for tagging.Henning Brauer
2003-05-12Adaptive timeout value scaling. Allows to reduce timeout values as theDaniel Hartmeier
2003-05-11Don't ntohs() the translation port for nat as it is already in host byte order.Ryan Thomas McBride
2003-05-10support loading of anchors from within the main ruleset viaHenning Brauer
2003-05-08Close sockets (otherwise the file handle limit can be reached when manyDaniel Hartmeier
2003-05-05Describe format of pfctl -sl output, reported by Alejandro G. Belluscio.Daniel Hartmeier
2003-05-03these files all had >9 arguments to .Nd, causing the name description to beJason McIntyre
2003-05-03don't free() the char * carrying the rule label too earlyHenning Brauer
2003-05-01ease label handlingHenning Brauer
2003-05-01allow label on antispoof; requested by Gregor Binder <gbinder at sysfive.com>Henning Brauer
2003-04-30kill globals anchorname and rulesetname; have them in main instead and passHenning Brauer
2003-04-30Allow tables to be loaded into anchors.Cedric Berger
2003-04-27Update the pfioc_table IOCTL structure.Cedric Berger
2003-04-25kill a workaround now that inet_net_pton acts reasonablyHenning Brauer
2003-04-25check asprintf return value for error as well, some implementations doPeter Valchev
2003-04-25Properly copy the second part of nat proxy port range, when specified.Daniel Hartmeier
2003-04-15display basic hfsc statsHenning Brauer
2003-04-15pass down the unparsed queue opts (struct node_queue_opt) toHenning Brauer
2003-04-15make print_hfsc_sc() take an extra struct node_hfsc_sc parameter and printHenning Brauer
2003-04-15don't include the unit "ms" when printing the service curve; parser wantsHenning Brauer
2003-04-15factor out service curve printing to it's own function, print_hfsc_sc().Henning Brauer
2003-04-14if linkshare service curve m2 == bandwidth, but d given, we do need to printHenning Brauer
2003-04-14only print hfsc linkshare when it differs from the defaultHenning Brauer
2003-04-14do not add a realtime service curve to the root queue asKenjiro Cho
2003-04-14let print_altq and print_queue take a struct node_queue_bw parameter insteadHenning Brauer
2003-04-13KNFHenning Brauer
2003-04-13prevent double service curve specificationHenning Brauer
2003-04-13add support for the HFSC linkshare, realtime, and upperlimit service curvesHenning Brauer
2003-04-13concistency in the print-funtions, here: HFSC uppercurve and bracketsHenning Brauer
2003-04-13unbreak (missing })Daniel Hartmeier
2003-04-13use pa->ifbandwidth instead of rate as reference bandwidth for the root queueHenning Brauer
2003-04-13say bye bye to hfscflags_list and hfscflags_itemHenning Brauer
2003-04-13process HFSC options for the linkshare, realtime and upperlimit service curvesHenning Brauer