summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2003-12-16Check that max-src-states and max-src-nodes are not being set to 0.Ryan Thomas McBride
2003-12-16hostid is stored in network byte order, print in host byte order.Ryan Thomas McBride
2003-12-15KNF here tooHenning Brauer
2003-12-15Whitespace.Ryan Thomas McBride
2003-12-15Add initial support for pf state synchronization over the network.Ryan Thomas McBride
2003-12-15Add support to track stateful connections by source ip. This allows usRyan Thomas McBride
2003-11-29allow ':' (range including boundaries) to be used whereever '><' (rangeDaniel Hartmeier
2003-11-22daniel stumbled over a broken regress test, and it turned out that I forgotHenning Brauer
2003-11-14in print_status:Henning Brauer
2003-11-14allow the debuglevel to be set from pf.conf (set debug)Henning Brauer
2003-11-08Add 'no-sync' state option to prevent state transition messages for statesRyan Thomas McBride
2003-11-06two more KNF violations I missed earlier. who introduces those all the time?Henning Brauer
2003-11-06and fix two err() that should be errx() while beeing hereHenning Brauer
2003-11-06need calloc hereHenning Brauer
2003-11-06KNFHenning Brauer
2003-11-06allow the label macros to be used in tags as well.Henning Brauer
2003-10-21don't use NULL as (int)0. henning okJun-ichiro itojun Hagino
2003-10-08fix cedric's breakage:Henning Brauer
2003-10-02clean up p = realloc(pRyan Thomas McBride
2003-09-26Rearchitecture of the userland/kernel IOCTL interface for transactions.Cedric Berger
2003-09-24Fix realloc usage and make sure we don't increase buffer size on failure.Cedric Berger
2003-09-18Not all address types have a mask.Cedric Berger
2003-09-18add some space before lists;Jason McIntyre
2003-09-01KNFHenning Brauer
2003-08-29Document interactions between tables and anchors.Cedric Berger
2003-08-28This change is busted. what's worse, REGRESSION TESTS WOULD HAVE CAUGHT IT!Kjell Wooding
2003-08-28tweak;Jason McIntyre
2003-08-27kill dangling 'else'. fixes modulus in W and M TCP optionsMike Frantzen
2003-08-26catch port/user/group a <>/>< b with a >= b, from mpech@Daniel Hartmeier
2003-08-25catch return-rst ttl values > 255, from aaron@Daniel Hartmeier
2003-08-24Tweaks:Cedric Berger
2003-08-22correct printf arg mismatch (in 64bit arch). dhartmei okJun-ichiro itojun Hagino
2003-08-22pf spelling policeDavid Krause
2003-08-22move pfctl_file_fingerprints() call, table commands can use -f themselvesDaniel Hartmeier
2003-08-22KNFHenning Brauer
2003-08-21Add Michal Zalewski's p0f v2 style passive OS fingerprinting to PF.Mike Frantzen
2003-08-20braindeadness police: catch queues which specify itself as child... 'nuff saidHenning Brauer
2003-08-20catch invalid CBQ priorities earlier, including a better error messageHenning Brauer
2003-08-20err out nicer on errors in queue defHenning Brauer
2003-08-18catch max-mss values > 65535, report by Gregory SteuckDaniel Hartmeier
2003-08-09This patch remove the restriction that tables cannot be used in routing orCedric Berger
2003-08-04Not every suggested patch is perfect :)Daniel Hartmeier
2003-08-04don't whine about "cannot load ruleset" when ruleset load wasn't desiredHenning Brauer
2003-07-31Make table tickets per-ruleset instead of global.Cedric Berger
2003-07-31remove the old tree when we find a new ticket.Kenjiro Cho
2003-07-29Remove space at end of line.Cedric Berger
2003-07-29indentTheo de Raadt
2003-07-21KNFHenning Brauer
2003-07-19Simplify struct pf_pooladdr to include struct pf_addr_wrap directlyCedric Berger
2003-07-18Simplify handling of flags (-R, -N...). Remove PFCTL_FLAG_ALL.Cedric Berger