index
:
src
cvs/HEAD
kms/intel
kms/radeon
master
OpenBSD base system
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
sbin
/
pfctl
Age
Commit message (
Expand
)
Author
2008-05-07
do not assume PF_INOUT is 0 in the enum; ok mcbride
Theo de Raadt
2008-05-07
scrub packets based on tags; ok henning
Markus Friedl
2008-05-07
allow setting TOS with scrub; ok mcbride, claudio
Markus Friedl
2008-05-06
Document new state creation counter for pfctl -s labels
Marco Pfatschbacher
2008-05-06
Add a counter to record how many states have been created by a rule.
Marco Pfatschbacher
2008-04-21
optnl is a crutch for those who do not understand yacc. it
Theo de Raadt
2008-02-13
Use HW_PHYSMEM64.
Mark Kettenis
2008-02-01
Enable the rest of the filter_opts to be used on anchors. These were accepted
Ryan Thomas McBride
2008-01-26
Create the automatic tables at the base of the anchor stack rather than
Ryan Thomas McBride
2008-01-25
Get rid of warning when compiling with OPT_DEBUG.
Ryan Thomas McBride
2007-12-05
remove unused functions
Charles Longeau
2007-11-27
typos; ok jmc@
Martynas Venckus
2007-11-13
Bring back the number converter for 'set hostid'.
Marco Pfatschbacher
2007-11-12
Remove space/tab compression function from lgetc() and replace
Marco Pfatschbacher
2007-10-25
Fix probability rules w/ numbers (e.g probability 0.4).
Marco Pfatschbacher
2007-10-24
HW_PHYSMEM is unsigned
Peter Stromberg
2007-10-22
sync with daemon parser code.
Pierre-Yves Ritschard
2007-10-22
pfctl does not need file secrecy
Theo de Raadt
2007-10-16
Allow unquoted numbers in variables.
Marco Pfatschbacher
2007-10-16
in the lex... even inside quotes, a \ followed by space or tab should
Theo de Raadt
2007-10-15
specifying int instead of just unsigned is better style
Theo de Raadt
2007-10-13
support an include directive; file of course must also be "secure" like
Theo de Raadt
2007-10-13
in all these programs using the same pfctl-derived parse.y, re-unify the
Theo de Raadt
2007-10-11
next step in the yylex unification: handle quoted strings in a nicer fashion
Theo de Raadt
2007-10-01
Backout NUMBER to string conversion.
Marco Pfatschbacher
2007-09-27
Add loginterface support for groups.
Marco Pfatschbacher
2007-09-23
Allow numbers to be used as unquoted strings again.
Marco Pfatschbacher
2007-09-12
add a missing range check for rtable ids; ok cloder henning
Theo de Raadt
2007-09-12
Add support to the lex for parsing number out of the stream. handle
Theo de Raadt
2007-08-30
add support for address ranges ("from 10.1.2.50 - 10.1.3.75") in from/to
Daniel Hartmeier
2007-07-01
states here too not state
Henning Brauer
2007-06-30
allow states instead of just state for -s and -F for consistency's sake.
Henning Brauer
2007-06-21
always initialize logif, from max laier, ok ryan
Henning Brauer
2007-06-20
Allow "log" for nat rules without "pass".
Marco Pfatschbacher
2007-05-31
convert to new .Dd format;
Jason McIntyre
2007-05-31
Cope with new ioctl interface (use pfsync_state instead of pf_state)
Ryan Thomas McBride
2007-05-27
No need to shutdown(2) DGRAM socket before closing it. Found while looking
Claudio Jeker
2007-04-21
"o" in optiopt_list is superfluous now too
Henning Brauer
2007-04-21
fix -o handling. syntax is now -o none|basic|profile. -o without argument
Henning Brauer
2007-04-20
no whitespace allowed between -o and its argument, so update doc/usage()
Jason McIntyre
2007-03-21
Enable basic ruleset optimization by default.
Ryan Thomas McBride
2007-03-01
be more careful with mixing &/| with &&/||, ok otto
Theo de Raadt
2007-02-23
if machine has more than 100MB of physmem, default the max table entries
Theo de Raadt
2007-02-09
pfctl_clear_rule_counters() is not needed any more
Henning Brauer
2007-02-09
use DIOCGETRULE ioctl & action set to PF_GET_CLR_CNTR to clear counters
Henning Brauer
2007-02-03
in decide_address_family(), only limit a rule to a specific address family
Daniel Hartmeier
2007-01-30
document -sI -v;
Jason McIntyre
2007-01-18
implement -T expire.
Henning Brauer
2006-12-24
Remove m88k compiler flags tweak which is no longer necessary since a long time
Miod Vallat
2006-12-13
IPv6 passive OS fingerprinting.
Jun-ichiro itojun Hagino
[prev]
[next]