summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2024-08-19correctly indent a lineJonathan Gray
2024-07-14This change allows user to define table inside the anchor like that:Alexandr Nedvedicky
2024-05-19remove prototypes with no matching functionJonathan Gray
2024-05-09ctime(3) and ctime_r(3) can fail when timestamps are way off.Florian Obser
2024-04-22Show pf fragment reassembly counters.Alexander Bluhm
2024-02-07fix anchortypes bounds testJonathan Gray
2024-02-02The fix to pfctl_kill_src_nodes() comes from Olivier Croquin.Alexandr Nedvedicky
2024-01-15Currently 'pfctl -a "*" -sr' recursively walks anchor tree and showsAlexandr Nedvedicky
2023-11-02Use pfctl_fopen (which checks to ensure the given file isn't a directory)Stuart Henderson
2023-10-26whitespace cleanup my fingers couldn't avoid doing while i was re-readingTheo de Raadt
2023-09-05fix mismatching declaration of argument with mismatched boundsRobert Nagy
2023-04-28This change speeds up DIOCGETRULE ioctl(2) which pfctl(8) uses toAlexandr Nedvedicky
2023-04-18Rewrite some ugly for loopsTheo Buehler
2023-02-07internal representation of icmp type/code in pfctl(8)/pf(4) does notAlexandr Nedvedicky
2023-01-06PF_ANCHOR_STACK_MAX is insufficient protection against stack overflow.Alexandr Nedvedicky
2022-11-21Fix DIOCIGETIFACES ioctl so all network interfacesAlexandr Nedvedicky
2022-11-19Prettify expired rules printingKlemens Nanni
2022-11-18Improve "once" bitsKlemens Nanni
2022-11-14- show -R with -s in options listJason McIntyre
2022-11-09simplify expiration of 'once' rules.Alexandr Nedvedicky
2022-09-23Fix detection of duplicate sticky-address in pf.conf parser.Alexander Bluhm
2022-07-27Remove redundant bzero, the pfctl struct memset later on.Moritz Buhl
2022-07-21Set the default pool size for the new anchors pool otherwise it's set to 0.Moritz Buhl
2022-07-20Add a pool for the allocation of the pf_anchor struct.Moritz Buhl
2022-01-28When it's the possessive of 'it', it's spelled "its", without thePhilip Guenther
2022-01-16pfctl: fix -Wunused-but-set-variable warningChristian Weisgerber
2021-11-11add tests to cover DIOCCHANGERULE ioctl(2)Alexandr Nedvedicky
2021-10-25- pfctl $nr incorrect macro expansionAlexandr Nedvedicky
2021-10-15Don't declare variables as "unsigned char *" that are passed toChristian Weisgerber
2021-02-01change route-to so it sends packets to IPs instead of interfaces.David Gwynne
2021-01-12Sometimes a user ID was logged in pflog(4) although the logopt ofAlexander Bluhm
2020-12-29getifaddrs() can return entries where ifa_addr is NULL. Check for thisSebastian Benoit
2020-12-16Fail to parse rules with invalid rangeskn
2020-12-16Reject rules with invalid port rangeskn
2020-12-07synproxy should be processing incoming SYN packets only.Alexandr Nedvedicky
2020-10-14Accommodate a basename(3) that takes a non-const parameter and mayChristian Weisgerber
2020-10-01rdomain IDs do not need to exist for "on rdomain N" to workkn
2020-09-17Fix the previous commit whose conditions were reversed.YASUOKA Masahiko
2020-09-17Make pfctl(8) check if the rtable really exists when parsing theYASUOKA Masahiko
2020-07-21rename PF_OPT_TABLE_PREFIX to PF_OPTIMIZER_TABLE_PFX and move it to pfvar.hHenning Brauer
2020-07-20Mention hostid and checksumkn
2020-05-15pf(4): use CLOCK_BOOTTIME to get time_uptime(9) in userspacecheloha
2020-01-28sbin/pfctl: replace TAILQ concatenation loop with TAILQ_CONCATbket
2020-01-16Fail on missing anchorkn
2020-01-15Do the actual pfr_strerror() to pf_strerror() renamekn
2020-01-15Unify error message for nonexisting anchorskn
2020-01-15Refine error messagekn
2020-01-15Merge radix_perror() into simpler warnx()/errx() usagekn
2020-01-15Further document recursive flush behaviourkn
2020-01-15Print the main ruleset/anchor as "/" not "<root>" for consistencykn
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-22 08:37:22 +0000