Age | Commit message (Expand) | Author |
2019-12-12 | Avoid optimizing empty rulesets | kn |
2019-11-27 | Fix function name in error message (zap trailing s) | kn |
2019-10-17 | Use -1 to indicate an invalid uid/gid, not UID_MAX and GID_MAX. | Todd C. Miller |
2019-08-26 | Fix file descriptor leak due to popfile() never closing the main config file. | tobhe |
2019-08-15 | pfctl_reset() must set syncookies settings back to default | Alexandr Nedvedicky |
2019-07-09 | Add parentheses for readability | kn |
2019-07-05 | Fix integer sizes in format strings and enable formatting warnings | Patrick Wildt |
2019-06-28 | When system calls indicate an error they return -1, not some arbitrary | Theo de Raadt |
2019-05-08 | pfctl should check pfctl.astack is not overrun | Alexandr Nedvedicky |
2019-05-08 | update to PF pfctl(8) and pf.conf(5) manpages | Alexandr Nedvedicky |
2019-04-18 | Always check for namespace collisions on table commands | kn |
2019-04-18 | Fix table definition parsing as unprivileged user | kn |
2019-04-15 | introduce 'pfctl -FR' to reset settings to defaults | Alexandr Nedvedicky |
2019-03-30 | Fail on invalid netmasks when filling tables | kn |
2019-03-07 | Remove pfctl_*_pool() remnants | kn |
2019-03-06 | Fix once rules | kn |
2019-02-18 | Change ps_len of struct pfioc_states and psn_len of struct | Alexander Bluhm |
2019-02-13 | (unsigned) means (unsigned int) which on ptrdiff_t or size_t or other | Theo de Raadt |
2019-02-10 | Anchor names must not be empty | kn |
2019-02-10 | Unify anchor name sanity checks | kn |
2019-02-02 | Show the routing address selected by "route-to" in "pfctl -s states". | YASUOKA Masahiko |
2019-01-31 | Make divert-packet port accept any port specification | kn |
2019-01-29 | Reuse copy_satopfaddr() when killing entries | kn |
2019-01-29 | Make -N and -r mutually exclusive | kn |
2019-01-28 | Simplify lookups when killing entries | kn |
2019-01-26 | Mention that -r does reverse DNS lookups for tables as well | kn |
2019-01-19 | Use mnemonic PFCTL_SHOW_* macros, terminate string with null character | kn |
2019-01-11 | Defuse `-F all -i interface' | kn |
2019-01-11 | When creating tables inside anchors, pfctl warned about namespace | kn |
2019-01-10 | Zap unnused iface function parameter from pfctl_kill_src_nodes() | kn |
2019-01-03 | Unbreak build under OPT_DEBUG | kn |
2019-01-02 | Error out on missing table command, zap internal wrapper function | kn |
2019-01-02 | Zap unused segment struct definition | kn |
2018-12-31 | Explicitly mention that tables created by -T{add,replace} are persistent | kn |
2018-12-27 | Zap duplicate struct declaration | kn |
2018-12-21 | DIOCIGETIFACES provides interfaces and groups, not drivers | kn |
2018-11-15 | scrub opts dont set tos, so remove it from the scrub_opts struct | David Gwynne |
2018-11-10 | Unbreak `-D macro=value' (r1.686 regression) | kn |
2018-11-07 | sync cmdline_symset() changes with src/usr.sbin; OK sashan@ claudio@ | miko |
2018-11-01 | - odd condition/test in PF lexer | Alexandr Nedvedicky |
2018-10-15 | use PFR_RB_NONE consistently | kn |
2018-09-18 | fix table commands under anchors | kn |
2018-09-16 | The kernel does not set the address family for the socket addresses | Alexander Bluhm |
2018-09-16 | Use uid_from_user(3) and gid_from_group(3) in utilities that | Todd C. Miller |
2018-09-13 | Avoid unneeded variable in gen_dynnode() | kn |
2018-09-11 | Fix netmask regression in get_dynnode() | kn |
2018-09-11 | Remove unused buffer from host() | kn |
2018-09-10 | Merge host_v{4,6}() into simpler host_ip() | kn |
2018-09-10 | Introduce copy_satopfaddr() | kn |
2018-09-08 | Allocate path only when needed, use __func__ | kn |