summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Collapse)Author
2003-01-14unified IP parser:Henning Brauer
-move host(), set_ipmask and the ifa_* functions to pfctl_parser.[c|h] -extend host() to handle /mask itself, plus minor adjustments -use that in pfctl_table.c instead of coding the same shit again discussed w/ cedric@ ok cedric@ dhartmei@
2003-01-14A bit of consistency in error messages. Before regress commit :)Cedric Berger
2003-01-13err() on all memory allocation failuresCamiel Dobbelaar
ok henning dhartmei
2003-01-11Whitespace KNFRyan Thomas McBride
2003-01-11use errx instead of handcrufting the same with fprintf and exitHenning Brauer
2003-01-11-use inet_net_pton to parse IPv4 addresses, gains us support for CIDR (10/8)Henning Brauer
-remove a redundant strlen check ok cedric@
2003-01-11whitespace KNF _AGAIN_Henning Brauer
2003-01-10Fix adding and deleting addresses in a table when there is a conflict withCedric Berger
the "negated" attribute of an address. The previous behaviour was incorrect in both cases (too strict for the add command and too permissive for the delete command). ok dhartmei@
2003-01-10Be a bit more strict when parsing options.Cedric Berger
Disallow "pfctl -s rabbits" and friends. ok dhartmei@
2003-01-10More details about the -T flag. Suggested by Rukh <openbsd@rukh.net>Cedric Berger
2003-01-10no return after err(3), errx -> err after calloc failureHenning Brauer
andrushock at korovino.net via dhartmei@
2003-01-10print queue length for PRIQ, works nowHenning Brauer
2003-01-10fix thinkoHenning Brauer
2003-01-09no need for explicit numbering in enumsHenning Brauer
ok dhartmei@
2003-01-09knfDaniel Hartmeier
2003-01-09strlcpy return checks.Daniel Hartmeier
2003-01-09Check return values on the remaining strlcpy/strlcat. ok henning@Daniel Hartmeier
2003-01-09use a verbose flag in pfctl_show_altq instead of carrying around opts fromHenning Brauer
pfctl.c, and get rid of the #include "pfctl_parser.h"
2003-01-09zap unneeded #include <errno.h> as seen by both of us while discussingHenning Brauer
#include stuff with dhartmei@
2003-01-09support PRIQ in queue statisticsHenning Brauer
2003-01-09minor KNFHenning Brauer
2003-01-09note about queue statsHenning Brauer
2003-01-09first attack at pfctl queue statistics, to be displayed with pfctl -vsqHenning Brauer
This commit is dedicated to the cute KLM girls who made part of this possible with giving me a seat in the plane where you actually have enough place to hack. Thanks, girls. ok markus@ dhartmei@
2003-01-09Add support for active/inactive tablesets in the kernel.Cedric Berger
Add table definition/initialisation construct in pfctl parser. Add and fix documentation for pf.4 and pf.conf.5. Tested on i386 and sparc64 by myself, macppc by Daniel. ok dhartmei@
2003-01-08check more strlcpy; camield@Theo de Raadt
2003-01-07Allow underscore at the beginning of strings, fixesDaniel Hartmeier
pass all user _spamd which was refused as syntax error before. Reported by Joe Nall. ok henning@
2003-01-07the "default" alias for "normal" optimization in pf_hints is dead for someHenning Brauer
time now... catched by david krause
2003-01-07Remove table name hashing (pass the name in each ioctl instead), andDaniel Hartmeier
introduce reference counting for tables, they are now automatically created and deleted through referencing rules. Diff partly from cedric@. ok mcbride@, henning@, cedric@
2003-01-06Fix some oversights with address pools for route-to/dup-to/reply-toRyan Thomas McBride
- copy key for src-hash - copy pool type (pools were being set to round-robin in all cases) + some minor knf. ok dhartmei@
2003-01-05don't whine about missing altq support in the kernel in the -q caseHenning Brauer
ok dhartmei@
2003-01-05err after calloc failure, not errxHenning Brauer
2003-01-05Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for tableDaniel Hartmeier
name. ok henning@, mcbride@, cedric@
2003-01-05err()/errx() do not return, errx() -> err() after calloc(), it sets errno.Daniel Hartmeier
From Andrey Matveev.
2003-01-04minor styleHenning Brauer
2003-01-04move noroute from flag in pf_rule_addr into type in pf_addr_wrap.Daniel Hartmeier
ok henning@, mcbride@
2003-01-04I do not know where this policy of "one .h file for every .c file" comesTheo de Raadt
from, but whoever thought of it is stupid.
2003-01-03Make good use of the 'else' keyword.Cedric Berger
2003-01-03knfTheo de Raadt
2003-01-03no need to closeTheo de Raadt
2003-01-03KNFTheo de Raadt
2003-01-03zero sockaddr before useTheo de Raadt
2003-01-03I am ready to strange the person who put a new strcpy() into ourTheo de Raadt
source tree.
2003-01-03(a && (b & c))Theo de Raadt
2003-01-03simplify ioctl accessTheo de Raadt
2003-01-03Remove _ before static functions & variables.Cedric Berger
2003-01-03Remove _ before static functions & variables.Cedric Berger
2003-01-03whitespace KNF (no, i don't touch the option inits)Daniel Hartmeier
2003-01-03kill stupid macroTheo de Raadt
2003-01-03KNFTheo de Raadt
2003-01-03Initialize hints addrinfo in a safe way.Cedric Berger