summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2004-02-19Makes pfctl -ss and pfctl -sq use optional -i argument.Cedric Berger
2004-02-19Makes pfctl -Fs and pfctl -w works with the optional -i specifier.Cedric Berger
2004-02-19now that qids are managed entirely in the kernel, the qid related codeKenjiro Cho
2004-02-17add -i flag, use it for -sI as a start. ok henning@, ok+test mcbride@Cedric Berger
2004-02-12- sort SYNOPSIS and options listJason McIntyre
2004-02-12add -p flag to specify the device - ok mcbride@, henning@ with no objectionsBob Beck
2004-02-11Fix interface clobbering for link-local addresses. Found by Pyun YongHyeon.Cedric Berger
2004-02-10KNFDaniel Hartmeier
2004-02-10KNFHenning Brauer
2004-02-10lotsoflotsoflotsof KNFHenning Brauer
2004-02-10KNFHenning Brauer
2004-02-10fix at leats the worst of Cedric "KNF is for everybody but me" Berger's fuckupHenning Brauer
2004-02-10new kernel reports enabled & disabled time - use that info.Cedric Berger
2004-02-05pfctl_update_qstats() returns -1 on error and the # of queues otehrwiseHenning Brauer
2004-02-04Handle rules like 'pass ... proto { tcp udp icmp } ... modulate state'Ryan Thomas McBride
2004-02-04Fix a number of bugs with setting pool limits which I introduced withRyan Thomas McBride
2004-02-03fix PR 3664 / jared r r spiegelHenning Brauer
2004-02-03bring back this fluffy change, of course without the bug:Henning Brauer
2004-01-29Clean up 'pfctl -s all' output.Ryan Thomas McBride
2004-01-26we must not omit printing the netmask when it is all zero, this is dangerous -Henning Brauer
2004-01-25This fix was made WITHOUT RUNNING REGRESS. Henning, you are beingTheo de Raadt
2004-01-22to parse v4 adresses, only use inet_net_pton when we find a /, otherwiseHenning Brauer
2004-01-14eliminate the predefined special qids so that qids become simpleKenjiro Cho
2004-01-05few off by ones in strlcpy overflow check; Patrick LatifiHenning Brauer
2004-01-05include path fixes for gcc3.Marc Espie
2004-01-04don't ignore "!" on "binat on !foo". ok mcbride@Cedric Berger
2003-12-31spacing. note this, cedricTheo de Raadt
2003-12-31Many improvements to the handling of interfaces in PF.Cedric Berger
2003-12-30fix TAILQ abuse.Henning Brauer
2003-12-27Remove extra \n from pf_print_state().Ryan Thomas McBride
2003-12-19i wrote much of these, assert my copyrightHenning Brauer
2003-12-19assert copyright. i rewrite much of thisTheo de Raadt
2003-12-17cosmetics, ok mcbride@Daniel Hartmeier
2003-12-16quotes, spaces and bars do not need to be escaped within displays;Jason McIntyre
2003-12-16Check that max-src-states and max-src-nodes are not being set to 0.Ryan Thomas McBride
2003-12-16hostid is stored in network byte order, print in host byte order.Ryan Thomas McBride
2003-12-15KNF here tooHenning Brauer
2003-12-15Whitespace.Ryan Thomas McBride
2003-12-15Add initial support for pf state synchronization over the network.Ryan Thomas McBride
2003-12-15Add support to track stateful connections by source ip. This allows usRyan Thomas McBride
2003-11-29allow ':' (range including boundaries) to be used whereever '><' (rangeDaniel Hartmeier
2003-11-22daniel stumbled over a broken regress test, and it turned out that I forgotHenning Brauer
2003-11-14in print_status:Henning Brauer
2003-11-14allow the debuglevel to be set from pf.conf (set debug)Henning Brauer
2003-11-08Add 'no-sync' state option to prevent state transition messages for statesRyan Thomas McBride
2003-11-06two more KNF violations I missed earlier. who introduces those all the time?Henning Brauer
2003-11-06and fix two err() that should be errx() while beeing hereHenning Brauer
2003-11-06need calloc hereHenning Brauer
2003-11-06KNFHenning Brauer
2003-11-06allow the label macros to be used in tags as well.Henning Brauer