summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Collapse)Author
2003-01-20unused var; found by dhartmei@ and camield@Henning Brauer
2003-01-20no named parameters in prototypesCamiel Dobbelaar
ok dhartmei cedric henning
2003-01-20Remove unused argument from print_name() and fix two other nitsCamiel Dobbelaar
found by lint. ok henning
2003-01-20Improve pfctl -vvs{r,n} output with rule containing tables.Cedric Berger
Shows the number of entries in the table or if the table is not active. ok dhartmei@, no objections.
2003-01-19Simplify and KNF anchoropt processing.Camiel Dobbelaar
ok dhartmei henning
2003-01-19The -s option to show anchors is 'A' or 'Anchors', not 'a' (which is usedDaniel Hartmeier
to show 'all' information).
2003-01-19Spin off label string expansion into a separate function. ClarifiesCamiel Dobbelaar
and tightens all expand_label functions. ok dhartmei henning
2003-01-19Quote label in rule output.Camiel Dobbelaar
ok henning dhartmei
2003-01-18Move freeaddrinfo() so it doesn't get called with an uninitializedDaniel Hartmeier
pointer (which segfaults). From Julien Bordet.
2003-01-18va_end() missing. Thanks to Andrey Matveev.Cedric Berger
2003-01-18quite some KNF for the older partsHenning Brauer
2003-01-18host() overhaul:Henning Brauer
-split off host_if, host_v4, host_v6, host_dns -kill the return-everywhere nightmare -bit better error messages makes the code more read-, understand- and maintainable; no fucntional changes. ok cedric@ dhartmei@ mcbride@
2003-01-18KNF after ryan...Henning Brauer
2003-01-18Cleanup PF_OPT_NOACTION with tables. No changes on current behaviour,Cedric Berger
but do something useful when the user has no access to /dev/pf. Tested on i386, sparc64. ok henning@
2003-01-18Little cleanup from Andrey Matveev <andrushock@korovino.net>Cedric Berger
Thanks!
2003-01-18Add missing token string and assignment to make static-port work for real.Ryan Thomas McBride
Diff and report courtesy of mpech@ and form@ ok dhartmei@
2003-01-17KNFMarkus Friedl
2003-01-17bandwith -> bandwidthCamiel Dobbelaar
YYERROR on failed parseicmpspec() ok dhartmei mcbride henning
2003-01-15what a bogus messageTheo de Raadt
2003-01-15Typo in yyerror().Mike Pechkin
henning@
2003-01-15Repair table "load" command.Cedric Berger
2003-01-14unified IP parser:Henning Brauer
-move host(), set_ipmask and the ifa_* functions to pfctl_parser.[c|h] -extend host() to handle /mask itself, plus minor adjustments -use that in pfctl_table.c instead of coding the same shit again discussed w/ cedric@ ok cedric@ dhartmei@
2003-01-14A bit of consistency in error messages. Before regress commit :)Cedric Berger
2003-01-13err() on all memory allocation failuresCamiel Dobbelaar
ok henning dhartmei
2003-01-11Whitespace KNFRyan Thomas McBride
2003-01-11use errx instead of handcrufting the same with fprintf and exitHenning Brauer
2003-01-11-use inet_net_pton to parse IPv4 addresses, gains us support for CIDR (10/8)Henning Brauer
-remove a redundant strlen check ok cedric@
2003-01-11whitespace KNF _AGAIN_Henning Brauer
2003-01-10Fix adding and deleting addresses in a table when there is a conflict withCedric Berger
the "negated" attribute of an address. The previous behaviour was incorrect in both cases (too strict for the add command and too permissive for the delete command). ok dhartmei@
2003-01-10Be a bit more strict when parsing options.Cedric Berger
Disallow "pfctl -s rabbits" and friends. ok dhartmei@
2003-01-10More details about the -T flag. Suggested by Rukh <openbsd@rukh.net>Cedric Berger
2003-01-10no return after err(3), errx -> err after calloc failureHenning Brauer
andrushock at korovino.net via dhartmei@
2003-01-10print queue length for PRIQ, works nowHenning Brauer
2003-01-10fix thinkoHenning Brauer
2003-01-09no need for explicit numbering in enumsHenning Brauer
ok dhartmei@
2003-01-09knfDaniel Hartmeier
2003-01-09strlcpy return checks.Daniel Hartmeier
2003-01-09Check return values on the remaining strlcpy/strlcat. ok henning@Daniel Hartmeier
2003-01-09use a verbose flag in pfctl_show_altq instead of carrying around opts fromHenning Brauer
pfctl.c, and get rid of the #include "pfctl_parser.h"
2003-01-09zap unneeded #include <errno.h> as seen by both of us while discussingHenning Brauer
#include stuff with dhartmei@
2003-01-09support PRIQ in queue statisticsHenning Brauer
2003-01-09minor KNFHenning Brauer
2003-01-09note about queue statsHenning Brauer
2003-01-09first attack at pfctl queue statistics, to be displayed with pfctl -vsqHenning Brauer
This commit is dedicated to the cute KLM girls who made part of this possible with giving me a seat in the plane where you actually have enough place to hack. Thanks, girls. ok markus@ dhartmei@
2003-01-09Add support for active/inactive tablesets in the kernel.Cedric Berger
Add table definition/initialisation construct in pfctl parser. Add and fix documentation for pf.4 and pf.conf.5. Tested on i386 and sparc64 by myself, macppc by Daniel. ok dhartmei@
2003-01-08check more strlcpy; camield@Theo de Raadt
2003-01-07Allow underscore at the beginning of strings, fixesDaniel Hartmeier
pass all user _spamd which was refused as syntax error before. Reported by Joe Nall. ok henning@
2003-01-07the "default" alias for "normal" optimization in pf_hints is dead for someHenning Brauer
time now... catched by david krause
2003-01-07Remove table name hashing (pass the name in each ioctl instead), andDaniel Hartmeier
introduce reference counting for tables, they are now automatically created and deleted through referencing rules. Diff partly from cedric@. ok mcbride@, henning@, cedric@
2003-01-06Fix some oversights with address pools for route-to/dup-to/reply-toRyan Thomas McBride
- copy key for src-hash - copy pool type (pools were being set to round-robin in all cases) + some minor knf. ok dhartmei@