summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2003-08-25catch return-rst ttl values > 255, from aaron@Daniel Hartmeier
2003-08-24Tweaks:Cedric Berger
2003-08-22correct printf arg mismatch (in 64bit arch). dhartmei okJun-ichiro itojun Hagino
2003-08-22pf spelling policeDavid Krause
2003-08-22move pfctl_file_fingerprints() call, table commands can use -f themselvesDaniel Hartmeier
2003-08-22KNFHenning Brauer
2003-08-21Add Michal Zalewski's p0f v2 style passive OS fingerprinting to PF.Mike Frantzen
2003-08-20braindeadness police: catch queues which specify itself as child... 'nuff saidHenning Brauer
2003-08-20catch invalid CBQ priorities earlier, including a better error messageHenning Brauer
2003-08-20err out nicer on errors in queue defHenning Brauer
2003-08-18catch max-mss values > 65535, report by Gregory SteuckDaniel Hartmeier
2003-08-09This patch remove the restriction that tables cannot be used in routing orCedric Berger
2003-08-04Not every suggested patch is perfect :)Daniel Hartmeier
2003-08-04don't whine about "cannot load ruleset" when ruleset load wasn't desiredHenning Brauer
2003-07-31Make table tickets per-ruleset instead of global.Cedric Berger
2003-07-31remove the old tree when we find a new ticket.Kenjiro Cho
2003-07-29Remove space at end of line.Cedric Berger
2003-07-29indentTheo de Raadt
2003-07-21KNFHenning Brauer
2003-07-19Simplify struct pf_pooladdr to include struct pf_addr_wrap directlyCedric Berger
2003-07-18Simplify handling of flags (-R, -N...). Remove PFCTL_FLAG_ALL.Cedric Berger
2003-07-15Repair memory managment in table parsing code.Cedric Berger
2003-07-14tpoDaniel Hartmeier
2003-07-11Better parsing and -v support for tables:Cedric Berger
2003-07-10Fix merging of host lists.Cedric Berger
2003-07-06knf (cedric did not do it right)Theo de Raadt
2003-07-04KNF after cedric (grmpf)Henning Brauer
2003-07-04KNFHenning Brauer
2003-07-04allow for a "pass" modifier on translation rules:Henning Brauer
2003-07-03Bye bye atexit(), bye bye globals...Cedric Berger
2003-07-03This patch finally cleanup pfctl_table.c. No more global buffer,Cedric Berger
2003-06-30Buffer management functions.Cedric Berger
2003-06-29Replace assert(3) calls with warnx(3), if the warning is relevant at all.Daniel Hartmeier
2003-06-28No need to include the same header twice.Cedric Berger
2003-06-27Reorg part I: move 3 functions out of pf_table.c to pf_radix.cCedric Berger
2003-06-21fflush(stdout) in pfctl -vvsq endless output.Daniel Hartmeier
2003-06-21count packets and bidirectionally on state entries, allowing for fine-grainedDamien Miller
2003-06-20some cleanings recommended by lint; dhartmei okTheo de Raadt
2003-06-19knfTheo de Raadt
2003-06-18change expand_label_addr() to use a switch (h->addr.type) instead ofHenning Brauer
2003-06-18when expanding the $srcaddr/$dstaddr label macros and the address is actuallyHenning Brauer
2003-06-13Make "show Anchor" obey quiet flag.Cedric Berger
2003-06-12in set_ipmask, do not try to mask off irrelevant bits of anything butHenning Brauer
2003-06-11- sync up MLD declaration with RFC3542 (s/MLD6/MLD/)Jun-ichiro itojun Hagino
2003-06-09Attempt to resolve byte order confusion in nat code once and for all.Ryan Thomas McBride
2003-06-08A table in an anchor creates a real anchor: pfctl -sA works.Cedric Berger
2003-06-07in print_host(), don't set the mask blindly to /128 but adhere to theHenning Brauer
2003-06-06simplify license. pfctl_altq.c with kenjiro's permission of course.Henning Brauer
2003-06-03process show options before ruleset reloadHenning Brauer
2003-05-25must not run check_netmask() before remove_invalid_hosts() - binat case had itHenning Brauer