summaryrefslogtreecommitdiff
path: root/sys/net/pf_ioctl.c
AgeCommit message (Expand)Author
2005-06-13make the packet and byte counters on rules and src nodes per direction,Henning Brauer
2005-05-27Calculate an MD5 checksum over the main pf ruleset.Marco Pfatschbacher
2005-05-27log two pairs of uid/pid through pflog: the uid/pid of the process thatDaniel Hartmeier
2005-05-21clean up and rework the interface absraction code big time, rip out multipleHenning Brauer
2005-05-10In DIOCKILLSTATES: take into account the direction of the state whenJoel Knight
2005-03-03when tagging, apply the same tag to all packets matching a state entryDaniel Hartmeier
2005-01-05- Use defines from pfvar.h for timeoutsRyan Thomas McBride
2004-12-22Introduce 'set skip on <ifspec>' to support a list of interfaces where noDaniel Hartmeier
2004-12-10allow pf to filter on route labelsHenning Brauer
2004-12-07KNFRyan Thomas McBride
2004-12-05after attaching an overload table, set its active flag. otherwise, theDaniel Hartmeier
2004-12-04Add kernel code to keep track of tcp connections which have completedRyan Thomas McBride
2004-12-01replace finer-grained spl locking in pfioctl() with a single broad lockDaniel Hartmeier
2004-09-21Implement "no scrub" to allow exclusion of specific traffic from scrub rules.Aaron Campbell
2004-09-09Copy out anchors with relative paths and wildcards correctly,Daniel Hartmeier
2004-07-22Add missing check for NULL in DIOCCHANGERULE. This prevents a crash inMathieu Sauve-Frankel
2004-07-05KNFHenning Brauer
2004-06-21First step towards more sane time handling in the kernel -- this changesThorsten Lockert
2004-06-14Remove DIOCBEGINRULES, DIOCCOMMITRULES, DIOCBEGINALTQS, DIOCCOMMITALTQS,Cedric Berger
2004-06-10rename struct pf_rule_addr member 'not' to 'neg', as 'not' is a reservedDaniel Hartmeier
2004-05-31thinko, reported by Fernando BragaDaniel Hartmeier
2004-05-21Use '/' instead of ':' as separator for anchor path components. Note thatDaniel Hartmeier
2004-05-21copy out relative anchor paths correctlyDaniel Hartmeier
2004-05-19Allow recursive anchors (anchors within anchors, up to 64Daniel Hartmeier
2004-05-18In DIOCCHANGERULE, move ticket increment above code that might freeDaniel Hartmeier
2004-05-05Use RFC1323 PAWS timestamps as a logical extension to the conventional TCPMike Frantzen
2004-05-03fix a stupid mistake in my previous commit.Kenjiro Cho
2004-04-28Dont step into INET6 code, just because af != AF_INETPhilipp Buehler
2004-04-27make separate functions to enable/disable altq, and call them when weKenjiro Cho
2004-04-26The rule_number parameter for pf_get_pool() needs to be 32 bits, not 8 -Ryan Thomas McBride
2004-04-26anchor refcounting. ok dhartmei@ mcbride@Cedric Berger
2004-04-09move some of the non-interrupt pools from the small kmem_map to the muchMike Frantzen
2004-03-22Support for best effort bulk transfers of states when pfsync syncif isRyan Thomas McBride
2004-03-18state->rule.ptr shall not be NULL. from Jon Coller. ok dhartmei@ mcbride@Cedric Berger
2004-03-15plug memory leak in error pathHenning Brauer
2004-03-09KNF, ok cedric@ deraadt@Ryan Thomas McBride
2004-02-20Make pfsync deal with clearing states bound to a group or interface (egRyan Thomas McBride
2004-02-19Makes pfctl -Fs and pfctl -w works with the optional -i specifier.Cedric Berger
2004-02-19the 2nd round of the qid assignment change.Kenjiro Cho
2004-02-13Do an explicit pf_update_anchor_rules() after an anchor gets removed.Marco Pfatschbacher
2004-02-10KNFDaniel Hartmeier
2004-02-10KNFHenning Brauer
2004-02-09Repair "set loginterface". Don't flush stats on pfctl -e. pf_status.sinceCedric Berger
2004-02-04Fix a number of bugs with setting pool limits which I introduced withRyan Thomas McBride
2004-01-05Repair my merging error, simplify DIOCCLRSTATUS code. ok dhartmei@Cedric Berger
2004-01-05Repair merge errors. Thanks Pyun YongHyeon, Sorry Henning :)Cedric Berger
2003-12-31spacing. note this, cedricTheo de Raadt
2003-12-31Many improvements to the handling of interfaces in PF.Cedric Berger
2003-12-22pasto in pf_status.src_nodes backup, from 'kirash'Daniel Hartmeier
2003-12-19i wrote much of these, assert my copyrightHenning Brauer