summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2002-06-08comment on IPv6 link-local twistsJun-ichiro itojun Hagino
2002-06-08pf_timeouts is shared between pfctl and authpf, put it in the shared file.Dale Rahn
2002-06-08add list expansion to src/dest in NAT rules. i.e.Kjell Wooding
2002-06-08remove macro concatenation via += per Theo's adviceHenning Brauer
2002-06-08allow macro concatenation likeHenning Brauer
2002-06-08Make state timeouts configurable per rule, likeDaniel Hartmeier
2002-06-08expand $nr -> rule number in rule labelsHenning Brauer
2002-06-08expand $proto in rule labelsHenning Brauer
2002-06-07Handle realloc() failure gracefully. Terminates with err() anyway in thisDaniel Hartmeier
2002-06-07henning, read this to see what i mean by KNFTheo de Raadt
2002-06-07add the possibility to configure a TTL while return-rstPhilipp Buehler
2002-06-07Add "(max <number>)" option for "keep/modulate state" to limit the numberDaniel Hartmeier
2002-06-07allow using $srcaddr, $srcport, $dstaddr and $dstport in rule labels,Henning Brauer
2002-06-07minor KNF while I'm hereHenning Brauer
2002-06-07make IPv6 scope identification work for dst (from any to fe80::1%lo0)Jun-ichiro itojun Hagino
2002-06-07support scoped IPv6 address in from/to portion.Jun-ichiro itojun Hagino
2002-06-06split out the pf_state printing functions to be used elsewhere, no functional...Michael Shalayeff
2002-06-03Add NAT keyword so it is picked up by apropos (man -k NAT). ok dhartmei@Kjell Wooding
2002-06-03Also print labels in 'pfctl -s all'. ok dhartmei@Kjell Wooding
2002-06-01ECN flag support for pf. Committed in consultation with Daniel.Hugh Graham
2002-05-27Ports require 6 chars, from Oleg SafiullinDaniel Hartmeier
2002-05-24Support mixed (IPv4/v6) address lists, expand to all possible and validDaniel Hartmeier
2002-05-23tiny KNF, some malloc checks, etcTheo de Raadt
2002-05-23new_addr is not used from anywhere. daniel@benzedrine.cx okJun-ichiro itojun Hagino
2002-05-19KNFTheo de Raadt
2002-05-19KNFTheo de Raadt
2002-05-19KNFTheo de Raadt
2002-05-19nicer usageTheo de Raadt
2002-05-18Handle long (unsigned 32-bit) IDs in print_uid/gid(). From Oleg Safiullin.Daniel Hartmeier
2002-05-12Explain that user/group 'unknown' can only be used with operators = and !=Daniel Hartmeier
2002-05-12Add gid based filtering, reduce to one (effective) uid, rename parserDaniel Hartmeier
2002-05-10Handle host name resolution returning multiple addresses in the ruleDaniel Hartmeier
2002-05-09Add a max-mss option to the scrub rule which will enforce a maximum mssjasoni
2002-05-09Introduce user based filtering. Rules can specify ruid and euid (real andDaniel Hartmeier
2002-05-05Instead of returning a useless kernel space pointer for the rule thatDaniel Hartmeier
2002-04-24Add dynamic (in-kernel) interface name -> address translation. Instead ofDaniel Hartmeier
2002-04-23Allow explicit filtering of fragments when they are not reassembled.Daniel Hartmeier
2002-04-18use strlcpyTheo de Raadt
2002-04-17Reset lineno for each file, so pfctl -R ... -N ... reports the rightDaniel Hartmeier
2002-04-15Use in_addr_t instead of unsigned long, which breaks on alpha (64-bit).Daniel Hartmeier
2002-04-08Fix typo, from Raymond M SchneiderDaniel Hartmeier
2002-04-01change return values back from EX_* to 0/1Daniel Hartmeier
2002-04-01style(9) improvements from Raymond M SchneiderDaniel Hartmeier
2002-03-28prototype pfctl_kill_states()Daniel Hartmeier
2002-03-27implement a "no-route" keyword.Michael Shalayeff
2002-03-26tidy up usage statement and sort headers. patch from dfa@solo.eeMike Frantzen
2002-03-26sort options and clean up the -k descrption. patch from dfa@solo.eeMike Frantzen
2002-03-25add -k option to shootdown all the state entries from the specified hostMike Frantzen
2002-03-21Add r option to SYNOPSIS. From Brian Poole.Daniel Hartmeier
2002-03-12Handle inet_ntop() returning NULL explicitly. Found by mpech@.Daniel Hartmeier