summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2001-07-17support min-ttl, okay dhartmei@Niels Provos
2001-07-17normalize ip_off, make IP_DF stripping optional, return rst is a flag now.Niels Provos
2001-07-17bitch about ! in pf rule; ok dhartmei@ and markus@Marco S Hyman
2001-07-17bitch about extra command line args; ok dhartmei@ and markus@Marco S Hyman
2001-07-17Only set default proto in the rdr case; markus@ OKTodd C. Miller
2001-07-16errx() if getservbyname() failsMarkus Friedl
2001-07-16get rid of cleanfiles by getting rid of cleanfiles; markus@ okMichael Shalayeff
2001-07-16better flags parsing; dhartmeiMarkus Friedl
2001-07-16add a yacc parser for pf.conf and nat.conf, with help from mickey@,Markus Friedl
2001-07-11Error on invalid portsConstantine Sapuntzakis
2001-07-10Oops, we can't use 0 as next_addr()'s error return since 0.0.0.0 isTodd C. Miller
2001-07-10Resolve as a host name if not an IP address; dhartmei@ OKTodd C. Miller
2001-07-10move "proto" in the nat case as wellTodd C. Miller
2001-07-09Move the proto field to be after the "on" argument which is consistentTodd C. Miller
2001-07-09Extend nat/rdr syntax. Add source/destination selection. MakeDaniel Hartmeier
2001-07-06Allow negative match on interface name for nat and rdrChris Cappuccio
2001-07-05&, not &&. Pointed out by dhartmei@.Hakan Olsson
2001-07-04cleanerTheo de Raadt
2001-07-04add new icmp codes and types as symbolic names, ok deraadtPeter Stromberg
2001-07-04do not pick a fightTheo de Raadt
2001-07-03Missed a few style fixes...Hakan Olsson
2001-07-03Document -q option. Some style fixes. dhartmei@ ok.Hakan Olsson
2001-07-03Add a -q (quiet) option. dhartmei@ ok.Hakan Olsson
2001-07-02Typo.Hakan Olsson
2001-07-01tag packets generated by pf (return-rst, return-icmp) so they are not filtere...Daniel Hartmeier
2001-07-01Appeared in 3.0, not 2.9; openbsd@davidkrause.comAngelos D. Keromytis
2001-07-01Add port ranges to the rdr directive. Connections can be redirectedKjell Wooding
2001-07-01Always print filter statistics, even when the filter is disabled.Kjell Wooding
2001-07-01Finish with posixifying command options. Now both "pfctl -Fs" andKjell Wooding
2001-06-29POSIX-ify the flag options at theo's requestKjell Wooding
2001-06-29change load_file implementation so we can accept input onKjell Wooding
2001-06-29fix counter/reason array usageDaniel Hartmeier
2001-06-28support scrub directive. somebody please please BNF yaccify this.Niels Provos
2001-06-28usage() was out of dateDaniel Hartmeier
2001-06-27Change flag syntaxKjell Wooding
2001-06-27errx() doesn't return. use err() to get errno as well. translate two common e...Daniel Hartmeier
2001-06-27print inbound packets passed correctlyDaniel Hartmeier
2001-06-27Use bitfields for flag options in getopt.Kjell Wooding
2001-06-27add -z optionKjell Wooding
2001-06-27add -z flag for zeroing statistics. -s status no longer resets anythingKjell Wooding
2001-06-27state counter changesTheo de Raadt
2001-06-27make it understand protocol numbers, tooNiels Provos
2001-06-26Add -N (parse, but do not load) and -v (verbose: show parsed rules)Kjell Wooding
2001-06-26name comparison operatorsDug Song
2001-06-26Add -Wallsmart
2001-06-26int -> unsigned, so -Wall is happyDaniel Hartmeier
2001-06-26array of counters indexed by reason codesTheo de Raadt
2001-06-26bad smartNiels Provos
2001-06-26Add err.h for errx()smart
2001-06-26some warnx, and exit instead of returnNiels Provos