summaryrefslogtreecommitdiff
path: root/sys/net/pf_ioctl.c
AgeCommit message (Expand)Author
2003-04-05Stick pf_default_rule everytime a packet pass because of theCedric Berger
2003-04-05Replace the timeout variables by the content of the timeoutCedric Berger
2003-04-03Back out my last change, which was incorrect or incomplete.Cedric Berger
2003-04-03Remove (state->rule.ptr != NULL) tests: this is always true now.Cedric Berger
2003-03-31Only delete rule structure when no state refer to it.Cedric Berger
2003-03-11Missing break, unintentional fall-through. Found by Kimmo Mösö.Daniel Hartmeier
2003-01-20It's difficult to create a table by changing its flags.Cedric Berger
2003-01-09minor KNFHenning Brauer
2003-01-09(whitespace) KNF, re-fold -w 80Daniel Hartmeier
2003-01-09Add support for active/inactive tablesets in the kernel.Cedric Berger
2003-01-07Remove table name hashing (pass the name in each ioctl instead), andDaniel Hartmeier
2003-01-06Move initialisation of radix table globals in pfr_initialize()Cedric Berger
2003-01-05Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for tableDaniel Hartmeier
2003-01-04Remove unused pf_add_addr(), ok mcbride@Daniel Hartmeier
2003-01-031) pfr_insert_kentries() cannot return ENOMEM anymore -> make it void.Cedric Berger
2003-01-02Require a direction to be specified for rules which do routing.Ryan Thomas McBride
2003-01-01KNFHenning Brauer
2003-01-01Fix breakage from PF_RULESET_MAX increase, regress tests match again.Daniel Hartmeier
2002-12-31Split scrub rules out from the filter rules in the kernel.Ryan Thomas McBride
2002-12-31Use a default state table limit of 10000 entries. This is safe for allDaniel Hartmeier
2002-12-30KNFHenning Brauer
2002-12-29Add support for radix tables for source and destination of PF rules.Cedric Berger
2002-12-27Bugfix and better error handling:Ryan Thomas McBride
2002-12-27Initialize rt_ifp in newly allocated pf_state objects to NULL.Daniel Hartmeier
2002-12-23Change from array to single pf_pabuf (no longer need multiple buffers asRyan Thomas McBride
2002-12-19Clear pf_state.nat_rule pointers when non-main nat rules are removed.Daniel Hartmeier
2002-12-18Store translation rule pointer in state entries, so pfctl -vsn can printDaniel Hartmeier
2002-12-18KNFHenning Brauer
2002-12-18Pass skip step values through ioctl interface, pfctl -vvsr shows them,Daniel Hartmeier
2002-12-17Merge pf_nat/pf_binat/pf_rdr structs into pf_rule. Simplifies code, allowsRyan Thomas McBride
2002-12-13add pqueue and pqid to pf_rule.Henning Brauer
2002-12-12Pastos in pf_compare_pool(); dhartmei@, mcbride@ ok.Aaron Campbell
2002-12-06Introduce anchors and named rule sets, allowing to load additional ruleDaniel Hartmeier
2002-12-01KNFHenning Brauer
2002-12-01- Clean up pf_ioctl mainly by adding new functions to handle cleaning andRyan Thomas McBride
2002-11-29Get the address pool in DIOCCHANGEADDR for all operations, preventsRyan Thomas McBride
2002-11-26fix "pfctl -Fq".Kenjiro Cho
2002-11-23KNFTheo de Raadt
2002-11-23kernel code to allow multiple redirection addresses to be specified for natRyan Thomas McBride
2002-11-12Missing splx.Mike Pechkin
2002-11-07Short-circuit evaluation can leave invalid pointers, closes PR2874.Daniel Hartmeier
2002-11-02Compare dynamic addresses correctly in pf_compare_*: check the interface nameRyan Thomas McBride
2002-10-25Compare pf_rule->label in pf_compare_rules(), too.Daniel Hartmeier
2002-10-22check the correct return value from ifunit()Ryan Thomas McBride
2002-10-20Move pf_compare_(rules|nats|binats|rdrs) to pf_ioctl.c. Simplifies andRyan Thomas McBride
2002-10-08the first step of pf/altq merge.Kenjiro Cho
2002-10-07-Wsign-compare cleanDaniel Hartmeier
2002-08-12Use state tree instead of separate (flat) list to find NAT proxy ports,Daniel Hartmeier
2002-07-05fix a small bug I found while installing a -current pf firewall at aHenning Brauer
2002-06-16Missing braces around else case, fixes a kernel crash introduced in r1.5 ifAaron Campbell