wireguard-openbsd/sbin/pfctl/pfctl.c, branch jd/queueboosts

Fail on missing anchor

2020-01-16T01:02:20Z

There is no reason to continue on anchor specific paths if the given anchor does not exist. OK sashan

Do the actual pfr_strerror() to pf_strerror() rename

2020-01-15T22:38:30Z

Missed in previous

Unify error message for nonexisting anchors

2020-01-15T22:31:51Z

pf(4) returns EINVAL for DIOCGETRULE, DIOCGETRULES and DIOCGETRULESET if the specified anchor does not exist. Extend and rename {pfr -> pf}_strerror() to make error message more consistent. There are other occasions as well but those need additional tweaks; that's stuff for another diff. OK and rename from sashan

Print the main ruleset/anchor as "/" not "" for consistency

2020-01-15T13:42:39Z

OK sashan

Enable pfctl(8) to recursively flush rules and tables from PF driver. The

2020-01-15T11:52:50Z

recursive operation ("pfctl -a '*' ...") works for '-s' option already. This change enables the same thing for '-F' option, so "pfctl -a '*' -Fa" will flush everything from PF driver. The idea was discussed with many on tech@ in spring 2019. OK kn@

Fix function name in error message (zap trailing s)

2019-11-27T19:42:56Z

pfctl_reset() must set syncookies settings back to default

2019-08-15T18:44:53Z

(bug found and fix tested by Jesper Wallin) OK deraadt OK kn

Add parentheses for readability

2019-07-09T16:42:48Z

Prompted by and OK deraadt

When system calls indicate an error they return -1, not some arbitrary

2019-06-28T13:32:41Z

value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future.

introduce 'pfctl -FR' to reset settings to defaults

2019-04-15T21:36:44Z

(discussed with many at tech@) OK deraadt@, kn@, sthen@, tedu@