summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Collapse)Author
2003-01-28typos; added white boldface to examplesJason McIntyre
ok deraadt@
2003-01-27bit KNFHenning Brauer
2003-01-27KNFTheo de Raadt
2003-01-27When -a is specified, the operation affects an anchor only, so don't tryDaniel Hartmeier
to replace queues (or options) which are global and can't be loaded into an anchor. Found by j@pureftpd.org.
2003-01-25Another nice cleanup patch from Andrey MatveevCedric Berger
KNF + remove/reorg headers.
2003-01-25Match changes for rdr port ranges made to pf.c:Ryan Thomas McBride
- fixes behaviour of rdr on le0 from foo to bar port 1:20 -> (lo0) port 22 - makes calculated mapping more explicit for the -> (lo0) port 22:* case testing from dhartmei@ ok dhartmei@
2003-01-25Fix NOACTION with table statements.Cedric Berger
2003-01-25Permit initialisation of a table content from a file in pf.conf.Cedric Berger
Cleaning up of the table options parsing, more flexible. idea+cleanup deraadt@, ok dhartmei@, pass all regress tests.
2003-01-25Correctly check illegal constructs with tables. Better error messages.Cedric Berger
ok dhartmei@ pass all regress tests.
2003-01-25tables are just tables; implementation details (radix) don't need to beHenning Brauer
mentioned. accidently already slipped in w/ my last commit; this one is forced. ok theo
2003-01-25if a table name ist too long, it's actually nice to tell so instead of justHenning Brauer
aborting with a syntax error
2003-01-25kill whitespace at EOLHenning Brauer
2003-01-24document pfctl -vvsqHenning Brauer
2003-01-24make rate2str include the unit in the ouput even if it is 0b. was irrelevantHenning Brauer
before as you cannot specify "bandwidth 0b" on a rule; now that rate2str is used for the stats output it does matter.
2003-01-24pfctl -vvsq shows bandwidth and packets/s for PRIQ now tooHenning Brauer
2003-01-24let pfctl -vvsq loop and display measured bandwidth and packets/s per queue.Henning Brauer
cbq only for now.
2003-01-24export rate2strHenning Brauer
2003-01-24tune internal APIs a bitHenning Brauer
2003-01-24bring in 3 yet unused helper functions before I lose 'em againHenning Brauer
2003-01-23Little cleanup thanks to Andrey MatveevCedric Berger
2003-01-22Automatically create tables for the "add" and "replace" table commands.Cedric Berger
Requested by deraadt@, pass all regress tests.
2003-01-21Support for TCP window scaling (RFC 1323). ok frantzen@Daniel Hartmeier
2003-01-21remove redundant ifCamiel Dobbelaar
ok dhartmei
2003-01-20Cut & paste madness. We were (un)lucky it worked before!Cedric Berger
2003-01-20unused var; found by dhartmei@ and camield@Henning Brauer
2003-01-20no named parameters in prototypesCamiel Dobbelaar
ok dhartmei cedric henning
2003-01-20Remove unused argument from print_name() and fix two other nitsCamiel Dobbelaar
found by lint. ok henning
2003-01-20Improve pfctl -vvs{r,n} output with rule containing tables.Cedric Berger
Shows the number of entries in the table or if the table is not active. ok dhartmei@, no objections.
2003-01-19Simplify and KNF anchoropt processing.Camiel Dobbelaar
ok dhartmei henning
2003-01-19The -s option to show anchors is 'A' or 'Anchors', not 'a' (which is usedDaniel Hartmeier
to show 'all' information).
2003-01-19Spin off label string expansion into a separate function. ClarifiesCamiel Dobbelaar
and tightens all expand_label functions. ok dhartmei henning
2003-01-19Quote label in rule output.Camiel Dobbelaar
ok henning dhartmei
2003-01-18Move freeaddrinfo() so it doesn't get called with an uninitializedDaniel Hartmeier
pointer (which segfaults). From Julien Bordet.
2003-01-18va_end() missing. Thanks to Andrey Matveev.Cedric Berger
2003-01-18quite some KNF for the older partsHenning Brauer
2003-01-18host() overhaul:Henning Brauer
-split off host_if, host_v4, host_v6, host_dns -kill the return-everywhere nightmare -bit better error messages makes the code more read-, understand- and maintainable; no fucntional changes. ok cedric@ dhartmei@ mcbride@
2003-01-18KNF after ryan...Henning Brauer
2003-01-18Cleanup PF_OPT_NOACTION with tables. No changes on current behaviour,Cedric Berger
but do something useful when the user has no access to /dev/pf. Tested on i386, sparc64. ok henning@
2003-01-18Little cleanup from Andrey Matveev <andrushock@korovino.net>Cedric Berger
Thanks!
2003-01-18Add missing token string and assignment to make static-port work for real.Ryan Thomas McBride
Diff and report courtesy of mpech@ and form@ ok dhartmei@
2003-01-17KNFMarkus Friedl
2003-01-17bandwith -> bandwidthCamiel Dobbelaar
YYERROR on failed parseicmpspec() ok dhartmei mcbride henning
2003-01-15what a bogus messageTheo de Raadt
2003-01-15Typo in yyerror().Mike Pechkin
henning@
2003-01-15Repair table "load" command.Cedric Berger
2003-01-14unified IP parser:Henning Brauer
-move host(), set_ipmask and the ifa_* functions to pfctl_parser.[c|h] -extend host() to handle /mask itself, plus minor adjustments -use that in pfctl_table.c instead of coding the same shit again discussed w/ cedric@ ok cedric@ dhartmei@
2003-01-14A bit of consistency in error messages. Before regress commit :)Cedric Berger
2003-01-13err() on all memory allocation failuresCamiel Dobbelaar
ok henning dhartmei
2003-01-11Whitespace KNFRyan Thomas McBride
2003-01-11use errx instead of handcrufting the same with fprintf and exitHenning Brauer