summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2022-01-16pfctl: fix -Wunused-but-set-variable warningChristian Weisgerber
2021-11-11add tests to cover DIOCCHANGERULE ioctl(2)Alexandr Nedvedicky
2021-10-25- pfctl $nr incorrect macro expansionAlexandr Nedvedicky
2021-10-15Don't declare variables as "unsigned char *" that are passed toChristian Weisgerber
2021-02-01change route-to so it sends packets to IPs instead of interfaces.David Gwynne
2021-01-12Sometimes a user ID was logged in pflog(4) although the logopt ofAlexander Bluhm
2020-12-29getifaddrs() can return entries where ifa_addr is NULL. Check for thisSebastian Benoit
2020-12-16Fail to parse rules with invalid rangeskn
2020-12-16Reject rules with invalid port rangeskn
2020-12-07synproxy should be processing incoming SYN packets only.Alexandr Nedvedicky
2020-10-14Accommodate a basename(3) that takes a non-const parameter and mayChristian Weisgerber
2020-10-01rdomain IDs do not need to exist for "on rdomain N" to workkn
2020-09-17Fix the previous commit whose conditions were reversed.YASUOKA Masahiko
2020-09-17Make pfctl(8) check if the rtable really exists when parsing theYASUOKA Masahiko
2020-07-21rename PF_OPT_TABLE_PREFIX to PF_OPTIMIZER_TABLE_PFX and move it to pfvar.hHenning Brauer
2020-07-20Mention hostid and checksumkn
2020-05-15pf(4): use CLOCK_BOOTTIME to get time_uptime(9) in userspacecheloha
2020-01-28sbin/pfctl: replace TAILQ concatenation loop with TAILQ_CONCATbket
2020-01-16Fail on missing anchorkn
2020-01-15Do the actual pfr_strerror() to pf_strerror() renamekn
2020-01-15Unify error message for nonexisting anchorskn
2020-01-15Refine error messagekn
2020-01-15Merge radix_perror() into simpler warnx()/errx() usagekn
2020-01-15Further document recursive flush behaviourkn
2020-01-15Print the main ruleset/anchor as "/" not "<root>" for consistencykn
2020-01-15Recent change to pfctl(8) prompts for a minor update of manpage.Alexandr Nedvedicky
2020-01-15Enable pfctl(8) to recursively flush rules and tables from PF driver. TheAlexandr Nedvedicky
2019-12-12Avoid optimizing empty rulesetskn
2019-11-27Fix function name in error message (zap trailing s)kn
2019-10-17Use -1 to indicate an invalid uid/gid, not UID_MAX and GID_MAX.Todd C. Miller
2019-08-26Fix file descriptor leak due to popfile() never closing the main config file.tobhe
2019-08-15pfctl_reset() must set syncookies settings back to defaultAlexandr Nedvedicky
2019-07-09Add parentheses for readabilitykn
2019-07-05Fix integer sizes in format strings and enable formatting warningsPatrick Wildt
2019-06-28When system calls indicate an error they return -1, not some arbitraryTheo de Raadt
2019-05-08pfctl should check pfctl.astack is not overrunAlexandr Nedvedicky
2019-05-08update to PF pfctl(8) and pf.conf(5) manpagesAlexandr Nedvedicky
2019-04-18Always check for namespace collisions on table commandskn
2019-04-18Fix table definition parsing as unprivileged userkn
2019-04-15introduce 'pfctl -FR' to reset settings to defaultsAlexandr Nedvedicky
2019-03-30Fail on invalid netmasks when filling tableskn
2019-03-07Remove pfctl_*_pool() remnantskn
2019-03-06Fix once ruleskn
2019-02-18Change ps_len of struct pfioc_states and psn_len of structAlexander Bluhm
2019-02-13(unsigned) means (unsigned int) which on ptrdiff_t or size_t or otherTheo de Raadt
2019-02-10Anchor names must not be emptykn
2019-02-10Unify anchor name sanity checkskn
2019-02-02Show the routing address selected by "route-to" in "pfctl -s states".YASUOKA Masahiko
2019-01-31Make divert-packet port accept any port specificationkn
2019-01-29Reuse copy_satopfaddr() when killing entrieskn