summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2006-11-13previous was not quite right;Jason McIntyre
2006-11-13fix a macro mistake;Jason McIntyre
2006-11-13Handle rules with addresses from mismatched address families correctly.Ryan Thomas McBride
2006-11-11Fix memory leak, from Charles Longeau, many okaysPedro Martelletto
2006-11-11EXAMPLES was getting too lengthy, so trim some of the ones that wereJason McIntyre
2006-11-10landisk has no kbd(8)Theo de Raadt
2006-11-10Add -nwid command to allow wireless interfaces to not prefer a specificMichael Knudsen
2006-11-10enable -g againAlexander von Gernler
2006-11-10check both rule sourace and destination when grouping sa'sMathieu Sauve-Frankel
2006-11-10When using -vv, also show grouped SAs.Hans-Joerg Hoexer
2006-11-10Fix grouping for SAs. Now all combinations of SAs are possible,Hans-Joerg Hoexer
2006-11-10Do not count sa, ike and tcpmd5 rules twice. Fixes PR 5263.Hans-Joerg Hoexer
2006-11-10Print the interface that each queue is bound to in the pfctl -sq outputJoel Knight
2006-11-09trim SEE ALSO: there is no need to list every pseudo-deviceJason McIntyre
2006-11-09desireable -> desirable;Jason McIntyre
2006-11-09support public keys w/o SubjectPublicKeyInfo (format: BEGIN RSA PUBLIC KEY)Markus Friedl
2006-11-09oopsTheo de Raadt
2006-11-08sh machines also have a /usr/mdec/mbrTheo de Raadt
2006-11-08add a -y flag, for non-interactive useTheo de Raadt
2006-11-07Only try to recursively print rules if they are actually anchors.Ryan Thomas McBride
2006-11-07Unbreak authpf by handling non-inline anchors separately from the { } anchorsRyan Thomas McBride
2006-11-05Don't open a transaction for a ruleset unless it's a brace ruleset thatRyan Thomas McBride
2006-11-03storing return value of strtol() in int variable was not safe,Alexander von Gernler
2006-11-03correctify example;Jason McIntyre
2006-11-02Check for newline before truncating.Ray Lai
2006-11-02Error out on empty string passed as device name.Ray Lai
2006-11-01sync usage(); ok mcbrideJason McIntyre
2006-11-01tweaks;Jason McIntyre
2006-11-01Don't recures ALL the time.Ryan Thomas McBride
2006-11-01KNF unrelated to previous commit.Ryan Thomas McBride
2006-11-01Add support for aggressive mode (from the k2k6 IPsec hackathon).Ryan Thomas McBride
2006-11-01Document recursive printing of anchors via -a '*' or -a 'anchor/*'.Ryan Thomas McBride
2006-10-31Allow a user to recursively print anchors including those withoutRyan Thomas McBride
2006-10-31Document new behaviour of the -o (ruleset optimization) flag.Ryan Thomas McBride
2006-10-31Allow pfctl ruleset optimizer to be controlled from the ruleset.Ryan Thomas McBride
2006-10-31- don't allow anchors with _* names to be cleared or loaded from theRyan Thomas McBride
2006-10-29Fix TAILQ usage, preventing crashesPedro Martelletto
2006-10-28Load all rules into memory before loading into the kernel, and add supportRyan Thomas McBride
2006-10-28prefer `buses' to `busses' for the noun plural;Jason McIntyre
2006-10-27Sometimes a compromise is needed.Marc Balmer
2006-10-27Fix a small typo in the manpage and while here add some space betweenMarc Balmer
2006-10-26- sort optionsJason McIntyre
2006-10-25Remove some unneeded externs. OK canacar@Moritz Jodeit
2006-10-25allow pflogd to listen on alternate pflog interfacesHenning Brauer
2006-10-25make absolutely sure logif is 0 unless set specifically, even if log is 0.Henning Brauer
2006-10-25teach the optimizer about logif, with & ok frantzenHenning Brauer
2006-10-25and another nit, $$.log should be set to 0 explicitely on quick without logHenning Brauer
2006-10-25add pflog to list of clonable devices; ok henningJason McIntyre
2006-10-25urgs, $$.quick needs to be set to 0 explicitely on log (without quick)Henning Brauer
2006-10-25allow the log interface to be selected likeHenning Brauer