summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2002-12-18Maintain separate pfioc_rule structures for each type of rule,Ryan Thomas McBride
2002-12-18proto list expansion is not supported in binat-anchor yet, print an errorDaniel Hartmeier
2002-12-18Support (single) destination port in rdr-anchor rules. Print an errorDaniel Hartmeier
2002-12-18fix some INCREDIBLE new bugs which were introducedTheo de Raadt
2002-12-17add support for the PRIQ schedulerHenning Brauer
2002-12-17Match merge of pf_nat/pf_binat/pf_rdr structs into pf_ruleRyan Thomas McBride
2002-12-17missing break in switchHenning Brauer
2002-12-17beautify the %type blockHenning Brauer
2002-12-17PRIQ and HFSC support functions, not yet used.Henning Brauer
2002-12-17class -> queueHenning Brauer
2002-12-17duh. two checks in rate2str which decide wether to print Mb or Kb had 1024Henning Brauer
2002-12-16only create a root queue if scheduler = cbqHenning Brauer
2002-12-16KNFHenning Brauer
2002-12-16only try to add the root queue for cbqHenning Brauer
2002-12-16get full [scheduler]_opts struct instead of just .flags, and wrap in into aHenning Brauer
2002-12-15There is no such thing as pf=YES variable, there is a variablemargarida
2002-12-15rule set(s) -> ruleset(s)margarida
2002-12-13allow a second queue for higher priorized (currently: tos=lowdelay) packetsHenning Brauer
2002-12-13a bit KNF originally part of another diff soon to come; frantzen@ correctlyHenning Brauer
2002-12-13permit re-ordering of some scrub parameters, and also clean up some otherTheo de Raadt
2002-12-12KNFHenning Brauer
2002-12-12we don't need to keep a private copy of the queue name in expand_rule,Henning Brauer
2002-12-11Replace strncpy + ugly pointer math with sscanif for reading source-hash keysRyan Thomas McBride
2002-12-10don't warnx after ioctl, use warnHenning Brauer
2002-12-09replace (properly guarded) strncpy using logic by a strsep & strlcpy usingHenning Brauer
2002-12-09(properly guarded) strcpy() -> strlcpy()Daniel Hartmeier
2002-12-09do not allow redefinitions in variable option blocks; henning okTheo de Raadt
2002-12-08strncpy is evil.Henning Brauer
2002-12-08allow flexible options order like Theo did for rules.Henning Brauer
2002-12-07Support parameters in anchor rules. Allows conditional evaluation, like:Daniel Hartmeier
2002-12-07more KNFHenning Brauer
2002-12-07KNFHenning Brauer
2002-12-07TAILQ_INSERT_TAIL instead of TAILQ_INSERT_HEAD. Makes addresses printRyan Thomas McBride
2002-12-07shadow cleanupHenning Brauer
2002-12-07kill an unused param to lungetcHenning Brauer
2002-12-07KNFHenning Brauer
2002-12-07get the interface's MTU instead of assuming 1500Henning Brauer
2002-12-07Convert the hash of a string key to network byte order. Makes regressionRyan Thomas McBride
2002-12-06styleHenning Brauer
2002-12-06Remove negated address list check again, doesn't work right yet.Daniel Hartmeier
2002-12-06let pfctl -v print out "block drop" instead of just "block" in the dropHenning Brauer
2002-12-06Introduce anchors and named rule sets, allowing to load additional ruleDaniel Hartmeier
2002-12-05fix a small cosmetic problem. if ifa_lookup was called in LOOKUP_NET mode,Henning Brauer
2002-12-05one step further to "program output is valid program input" and the relatedHenning Brauer
2002-12-05-quote varset in -v outputHenning Brauer
2002-12-05Replace warnx with warn on ioctls so that we get the error message associatedRyan Thomas McBride
2002-12-04in host(), apply a given netmask to all members of the node_host listHenning Brauer
2002-12-04do not warn for unused variables except with -v -v; henning okTheo de Raadt
2002-12-03be nice and shutdown the socket after beeing done; pointed out by kenjiroHenning Brauer
2002-12-02KNFHenning Brauer