summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2005-11-17for pfctl -f rules, open the file before resetting options. when openingDaniel Hartmeier
2005-11-12return; at end of function is dorkyTheo de Raadt
2005-11-04crank pf_state and pf_src_node byte and packet counters to u_in64_t, sinceRyan Thomas McBride
2005-10-18add support for static interface group expansion, i. e.Henning Brauer
2005-10-13unused parametersHenning Brauer
2005-10-13dead definesHenning Brauer
2005-08-17with pfctl -vsI, indicate which interfaces are being skipped.Daniel Hartmeier
2005-07-11clear PFI_IFLAG_SKIP when clearing interface flags, found by David Hill,Daniel Hartmeier
2005-06-30in order for pfvar.h not to conflict with openssl's crypto.h, useNikolay Sturm
2005-06-14no need to restrict tagging to stateful rules any more, dhartmei okHenning Brauer
2005-06-13document extended pfctl -sl formatHenning Brauer
2005-06-13make the packet and byte counters on rules and src nodes per direction,Henning Brauer
2005-06-13free memory in show_src_nodes and show_states, as reported byJared Yanovich
2005-05-28don't print the "[ Inserted: uid pid ]" line when -g is used, so theDaniel Hartmeier
2005-05-27Hide Hostid and Checksum in pfctl -si output unless the -v flag is used.Ryan Thomas McBride
2005-05-27Calculate an MD5 checksum over the main pf ruleset.Marco Pfatschbacher
2005-05-27get rid of 'log-all'. now that we have 'log (options)', make 'all' anDaniel Hartmeier
2005-05-27get rid of shift/reduce conflicts, don't support empty logoptsDaniel Hartmeier
2005-05-27log two pairs of uid/pid through pflog: the uid/pid of the process thatDaniel Hartmeier
2005-05-27allow 'tagged' in 'anchor' rules (without complaining about missingDaniel Hartmeier
2005-05-26The illegalness of "no nat log" is already enforced by the grammar.Camiel Dobbelaar
2005-05-26use PF_LOG, PF_LOGALL instead of numeric constantsDaniel Hartmeier
2005-05-26support 'log' and 'log-all' in 'nat/rdr/binat pass' rules. original patchDaniel Hartmeier
2005-05-26switch the max_src_{states,conn,conn_rate} from superblock breaks to superblockMike Frantzen
2005-05-25make the remaining pf_rule fields named superblock BREAKs instead just lettingMike Frantzen
2005-05-25make the optimizer safe in the presence of interface groups. they must act asMike Frantzen
2005-05-24Identify states that will not be synchronised in pfctl -vvss output.Christopher Pascoe
2005-05-23change pool allocation of table entries, no longer use the oldnointrDaniel Hartmeier
2005-05-23remove code that duplicates getservice()Camiel Dobbelaar
2005-05-22Add support to kill states that match networks.Marco Pfatschbacher
2005-05-21clean up and rework the interface absraction code big time, rip out multipleHenning Brauer
2005-05-05typoJoel Knight
2005-04-22Catch bad flags, ie. flags that always evaluate to false. This happensCamiel Dobbelaar
2005-03-07fd leaks in error paths, From: Andrey Matveev <andrushock@korovino.net>Henning Brauer
2005-03-07print unsigned long with %lu, not with %d and not with %ld.Henning Brauer
2005-03-06allow commas in the hfsc service curve spec, inconsistency pointed out inHenning Brauer
2005-03-06print "set skip on" with -v in such a way that the output is valid inputDaniel Hartmeier
2005-02-28use the linkshar keyword when gtalking about the link sharing serviceHenning Brauer
2005-02-27support 'tagged' in translation rules, non-delayed tag lookupDaniel Hartmeier
2005-02-26ypu sure get the impression the number of memory leaks in error pathesHenning Brauer
2005-02-17Fix indentation as to not mislead the code reader. No functional change.Aaron Campbell
2005-02-07KNF; ok henning@David Krause
2005-01-28add messages for syntax errors that caused silent failure before.Daniel Hartmeier
2005-01-27dynamic interface names must start with a letter. catches the nonsensicalDaniel Hartmeier
2005-01-06Missing braces in pfctl_load_debug(), pointed out by camield@Ryan Thomas McBride
2005-01-05spelling;Jason McIntyre
2005-01-05Document -m flag.Ryan Thomas McBride
2005-01-05Modify pfctl behaviour so that 'set ...' options are no longer "sticky", ie.Ryan Thomas McBride
2005-01-03don't merge a rule's source address into a table if we're already trying toMike Frantzen
2004-12-29Print 'set fingerprints' correctly when parsing verbosely.Ryan Thomas McBride