summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2003-06-09Attempt to resolve byte order confusion in nat code once and for all.Ryan Thomas McBride
2003-06-08A table in an anchor creates a real anchor: pfctl -sA works.Cedric Berger
2003-06-07in print_host(), don't set the mask blindly to /128 but adhere to theHenning Brauer
2003-06-06simplify license. pfctl_altq.c with kenjiro's permission of course.Henning Brauer
2003-06-03process show options before ruleset reloadHenning Brauer
2003-05-25must not run check_netmask() before remove_invalid_hosts() - binat case had itHenning Brauer
2003-05-24better netmask checkHenning Brauer
2003-05-24Properly reset buffers after each "table" command.Cedric Berger
2003-05-24tweak;Jason McIntyre
2003-05-24syncCedric Berger
2003-05-19print out the full netmask; don't just ignore the upper bits in the v4 caseHenning Brauer
2003-05-19reject invalid netmasks like 10.0.0.0/68, and fix up the netmask forHenning Brauer
2003-05-19all host() receivers have to test for NULLHenning Brauer
2003-05-19err out on obviously wrong netmasksHenning Brauer
2003-05-19if host() returns NULL, it is an error, so err the fuck out and don'tHenning Brauer
2003-05-19don't print altq en-/disabled - there's no point, you can't turn them onHenning Brauer
2003-05-19style consistencyHenning Brauer
2003-05-19Use a decaying average for smoother rate estimates.Camiel Dobbelaar
2003-05-18indent here in the same way as in -vsr for consistencyHenning Brauer
2003-05-18in the pfctl -vsr output (-vvsr/-gvvsr as well), indent instead of extraHenning Brauer
2003-05-17Fix proxy related output.Daniel Hartmeier
2003-05-17A little bugfix. We want pfioc_states, not pfioc_state.Ryan Thomas McBride
2003-05-17support inverse matching on tags likeHenning Brauer
2003-05-16TCP SYN proxy. Instead of 'keep state' or 'modulate state', one can useDaniel Hartmeier
2003-05-15properly complain about too long tagsHenning Brauer
2003-05-14add scrub modifier "reassemble tcp" to turn on stateful TCP normalizationsMike Frantzen
2003-05-14tagging on binatHenning Brauer
2003-05-14enabled tagging on rdr rulesHenning Brauer
2003-05-14with tag/tagged given, only whine about missing keep state on pass rulesHenning Brauer
2003-05-14allow SCRUB rules to specify protocol again. broken sometime in the past.Mike Frantzen
2003-05-14tags on nat rules:Henning Brauer
2003-05-14print the redirection target for nat/rdr/binat slighly later.Henning Brauer
2003-05-13make sure tagging is only ever used with stateful filter rulesHenning Brauer
2003-05-13correct rule printingHenning Brauer
2003-05-13userland part for tagging.Henning Brauer
2003-05-12Adaptive timeout value scaling. Allows to reduce timeout values as theDaniel Hartmeier
2003-05-11Don't ntohs() the translation port for nat as it is already in host byte order.Ryan Thomas McBride
2003-05-10support loading of anchors from within the main ruleset viaHenning Brauer
2003-05-08Close sockets (otherwise the file handle limit can be reached when manyDaniel Hartmeier
2003-05-05Describe format of pfctl -sl output, reported by Alejandro G. Belluscio.Daniel Hartmeier
2003-05-03these files all had >9 arguments to .Nd, causing the name description to beJason McIntyre
2003-05-03don't free() the char * carrying the rule label too earlyHenning Brauer
2003-05-01ease label handlingHenning Brauer
2003-05-01allow label on antispoof; requested by Gregor Binder <gbinder at sysfive.com>Henning Brauer
2003-04-30kill globals anchorname and rulesetname; have them in main instead and passHenning Brauer
2003-04-30Allow tables to be loaded into anchors.Cedric Berger
2003-04-27Update the pfioc_table IOCTL structure.Cedric Berger
2003-04-25kill a workaround now that inet_net_pton acts reasonablyHenning Brauer
2003-04-25check asprintf return value for error as well, some implementations doPeter Valchev
2003-04-25Properly copy the second part of nat proxy port range, when specified.Daniel Hartmeier