summaryrefslogtreecommitdiff
path: root/sbin/pfctl
AgeCommit message (Expand)Author
2023-04-28This change speeds up DIOCGETRULE ioctl(2) which pfctl(8) uses toAlexandr Nedvedicky
2023-04-18Rewrite some ugly for loopsTheo Buehler
2023-02-07internal representation of icmp type/code in pfctl(8)/pf(4) does notAlexandr Nedvedicky
2023-01-06PF_ANCHOR_STACK_MAX is insufficient protection against stack overflow.Alexandr Nedvedicky
2022-11-21Fix DIOCIGETIFACES ioctl so all network interfacesAlexandr Nedvedicky
2022-11-19Prettify expired rules printingKlemens Nanni
2022-11-18Improve "once" bitsKlemens Nanni
2022-11-14- show -R with -s in options listJason McIntyre
2022-11-09simplify expiration of 'once' rules.Alexandr Nedvedicky
2022-09-23Fix detection of duplicate sticky-address in pf.conf parser.Alexander Bluhm
2022-07-27Remove redundant bzero, the pfctl struct memset later on.Moritz Buhl
2022-07-21Set the default pool size for the new anchors pool otherwise it's set to 0.Moritz Buhl
2022-07-20Add a pool for the allocation of the pf_anchor struct.Moritz Buhl
2022-01-28When it's the possessive of 'it', it's spelled "its", without thePhilip Guenther
2022-01-16pfctl: fix -Wunused-but-set-variable warningChristian Weisgerber
2021-11-11add tests to cover DIOCCHANGERULE ioctl(2)Alexandr Nedvedicky
2021-10-25- pfctl $nr incorrect macro expansionAlexandr Nedvedicky
2021-10-15Don't declare variables as "unsigned char *" that are passed toChristian Weisgerber
2021-02-01change route-to so it sends packets to IPs instead of interfaces.David Gwynne
2021-01-12Sometimes a user ID was logged in pflog(4) although the logopt ofAlexander Bluhm
2020-12-29getifaddrs() can return entries where ifa_addr is NULL. Check for thisSebastian Benoit
2020-12-16Fail to parse rules with invalid rangeskn
2020-12-16Reject rules with invalid port rangeskn
2020-12-07synproxy should be processing incoming SYN packets only.Alexandr Nedvedicky
2020-10-14Accommodate a basename(3) that takes a non-const parameter and mayChristian Weisgerber
2020-10-01rdomain IDs do not need to exist for "on rdomain N" to workkn
2020-09-17Fix the previous commit whose conditions were reversed.YASUOKA Masahiko
2020-09-17Make pfctl(8) check if the rtable really exists when parsing theYASUOKA Masahiko
2020-07-21rename PF_OPT_TABLE_PREFIX to PF_OPTIMIZER_TABLE_PFX and move it to pfvar.hHenning Brauer
2020-07-20Mention hostid and checksumkn
2020-05-15pf(4): use CLOCK_BOOTTIME to get time_uptime(9) in userspacecheloha
2020-01-28sbin/pfctl: replace TAILQ concatenation loop with TAILQ_CONCATbket
2020-01-16Fail on missing anchorkn
2020-01-15Do the actual pfr_strerror() to pf_strerror() renamekn
2020-01-15Unify error message for nonexisting anchorskn
2020-01-15Refine error messagekn
2020-01-15Merge radix_perror() into simpler warnx()/errx() usagekn
2020-01-15Further document recursive flush behaviourkn
2020-01-15Print the main ruleset/anchor as "/" not "<root>" for consistencykn
2020-01-15Recent change to pfctl(8) prompts for a minor update of manpage.Alexandr Nedvedicky
2020-01-15Enable pfctl(8) to recursively flush rules and tables from PF driver. TheAlexandr Nedvedicky
2019-12-12Avoid optimizing empty rulesetskn
2019-11-27Fix function name in error message (zap trailing s)kn
2019-10-17Use -1 to indicate an invalid uid/gid, not UID_MAX and GID_MAX.Todd C. Miller
2019-08-26Fix file descriptor leak due to popfile() never closing the main config file.tobhe
2019-08-15pfctl_reset() must set syncookies settings back to defaultAlexandr Nedvedicky
2019-07-09Add parentheses for readabilitykn
2019-07-05Fix integer sizes in format strings and enable formatting warningsPatrick Wildt
2019-06-28When system calls indicate an error they return -1, not some arbitraryTheo de Raadt
2019-05-08pfctl should check pfctl.astack is not overrunAlexandr Nedvedicky
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-26 17:38:28 +0000