summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2002-11-19minor cosmetics, space after "label %s", in case both label and queue areDaniel Hartmeier
2002-11-19only take cbq opts from schedtype if type=CBQHenning Brauer
2002-11-19pfctl -sq prettierHenning Brauer
2002-11-19altq ifspec is always level 0Henning Brauer
2002-11-19altq interface spec should be printed as altq interface spec, not queueHenning Brauer
2002-11-19repair queuespec syntax glitch, theo agreesHenning Brauer
2002-11-19default priority is 1, not 0Henning Brauer
2002-11-19- match 'Gb' case-sensitivelyCamiel Dobbelaar
2002-11-19icmp-type was off by one, ok henning@Peter Stromberg
2002-11-18no; do not use };Theo de Raadt
2002-11-18more using strl* return values instead of strlen callsHenning Brauer
2002-11-18easier "queue name too long" detection; from theoHenning Brauer
2002-11-18support Gb in print; henning okTheo de Raadt
2002-11-18KNFTheo de Raadt
2002-11-18KNFTheo de Raadt
2002-11-18altq and pf mergedHenning Brauer
2002-11-13as scrub rules end up in a struct pf_rule just call expand_rule instead ofHenning Brauer
2002-11-13Add label macro $if, as we support {} list expansion for interfaces now.Daniel Hartmeier
2002-11-13Initialize tail pointer to node, found by fries@Daniel Hartmeier
2002-11-09SEE ALSO reordering and corrections.Federico G. Schwindt
2002-11-08init buf to NULL just in case...Henning Brauer
2002-11-07move the ifa_exists block a bit up in host()Henning Brauer
2002-11-04welcome to CIDR world, pfctl!Henning Brauer
2002-11-02%i -> %d, matches the style of existing code, from millert@Daniel Hartmeier
2002-11-02printf int with %i, not %u. from pilot@monkey.org.Daniel Hartmeier
2002-10-30simplifyHenning Brauer
2002-10-30fix interface expansion. since the reversed list expansion code wasHenning Brauer
2002-10-29introduceHenning Brauer
2002-10-27remove the "flags X" syntax.Henning Brauer
2002-10-25- more sa_family_tCamiel Dobbelaar
2002-10-22%ul -> %luMike Pechkin
2002-10-22More conversion of "int af" and "u_int8_t af" declarations and functionRyan Thomas McBride
2002-10-22Rename ipmask to set_ipmask and add some functionality: the netmaskCamiel Dobbelaar
2002-10-17These checks are also made in nat_consistent() and rdr_consistent().Ryan Thomas McBride
2002-10-17- accept all protocols that are specified by number if they are inCamiel Dobbelaar
2002-10-16Fix and improve binat mask comparison.Mike Pechkin
2002-10-14Allow one to specify a netblock in a binat rule:Henning Brauer
2002-10-11When a macro cannot be expanded because it is not defined, say so. Also warnCamiel Dobbelaar
2002-10-11In lgetc(), compress strings of whitespace to a single space. This makesCamiel Dobbelaar
2002-10-08 remove <0 checks on unsigned numbers.Vincent Labrecque
2002-10-07-Wsign-compare cleanDaniel Hartmeier
2002-10-07Two cases of const-correctness and make one global local.Daniel Hartmeier
2002-10-07set block-policy [drop|return]Henning Brauer
2002-10-07support a generic returnHenning Brauer
2002-10-07make return-icmp work for rules covering both v4 and v6Henning Brauer
2002-10-07use a new rule_flag PFRULE_RETURNICMP to decide wether to return-icmp or notHenning Brauer
2002-10-07Add 'reply-to' to filter rules, similar to route-to, but applying toDaniel Hartmeier
2002-10-06Move CHECK_ROOT into LOOP_THROUGH, gets rid of one macro and savesDaniel Hartmeier
2002-10-05Expand {} lists from left to right, so 'pass in from { a, b } to any'Daniel Hartmeier
2002-10-05Allow filtering based on IP header's tos field.Daniel Hartmeier