summaryrefslogtreecommitdiffstats
path: root/sbin/pfctl
AgeCommit message (Expand)AuthorFilesLines
2021-02-01change route-to so it sends packets to IPs instead of interfaces.dlg2-195/+51
2021-01-12Sometimes a user ID was logged in pflog(4) although the logopt ofbluhm2-5/+4
2020-12-29getifaddrs() can return entries where ifa_addr is NULL. Check for thisbenno1-2/+3
2020-12-16Fail to parse rules with invalid rangeskn1-3/+33
2020-12-16Reject rules with invalid port rangeskn1-2/+4
2020-12-07synproxy should be processing incoming SYN packets only.sashan1-1/+7
2020-10-14Accommodate a basename(3) that takes a non-const parameter and maynaddy1-3/+6
2020-10-01rdomain IDs do not need to exist for "on rdomain N" to workkn1-9/+3
2020-09-17Fix the previous commit whose conditions were reversed.yasuoka1-3/+3
2020-09-17Make pfctl(8) check if the rtable really exists when parsing theyasuoka1-12/+19
2020-07-21rename PF_OPT_TABLE_PREFIX to PF_OPTIMIZER_TABLE_PFX and move it to pfvar.hhenning2-6/+5
2020-07-20Mention hostid and checksumkn1-3/+6
2020-05-15pf(4): use CLOCK_BOOTTIME to get time_uptime(9) in userspacecheloha1-2/+2
2020-01-28sbin/pfctl: replace TAILQ concatenation loop with TAILQ_CONCATbket2-24/+8
2020-01-16Fail on missing anchorkn1-15/+5
2020-01-15Do the actual pfr_strerror() to pf_strerror() renamekn5-17/+17
2020-01-15Unify error message for nonexisting anchorskn3-22/+23
2020-01-15Refine error messagekn1-2/+2
2020-01-15Merge radix_perror() into simpler warnx()/errx() usagekn1-22/+12
2020-01-15Further document recursive flush behaviourkn1-1/+14
2020-01-15Print the main ruleset/anchor as "/" not "<root>" for consistencykn1-2/+2
2020-01-15Recent change to pfctl(8) prompts for a minor update of manpage.sashan1-2/+9
2020-01-15Enable pfctl(8) to recursively flush rules and tables from PF driver. Thesashan5-63/+285
2019-12-12Avoid optimizing empty rulesetskn1-2/+5
2019-11-27Fix function name in error message (zap trailing s)kn1-2/+2
2019-10-17Use -1 to indicate an invalid uid/gid, not UID_MAX and GID_MAX.millert2-17/+15
2019-08-26Fix file descriptor leak due to popfile() never closing the main config file.tobhe1-14/+15
2019-08-15pfctl_reset() must set syncookies settings back to defaultsashan1-1/+2
2019-07-09Add parentheses for readabilitykn1-2/+2
2019-07-05Fix integer sizes in format strings and enable formatting warningspatrick1-20/+22
2019-06-28When system calls indicate an error they return -1, not some arbitraryderaadt6-73/+73
2019-05-08pfctl should check pfctl.astack is not overrunsashan1-1/+3
2019-05-08update to PF pfctl(8) and pf.conf(5) manpagessashan1-3/+6
2019-04-18Always check for namespace collisions on table commandskn1-3/+3
2019-04-18Fix table definition parsing as unprivileged userkn1-2/+7
2019-04-15introduce 'pfctl -FR' to reset settings to defaultssashan2-5/+50
2019-03-30Fail on invalid netmasks when filling tableskn1-2/+2
2019-03-07Remove pfctl_*_pool() remnantskn2-10/+2
2019-03-06Fix once ruleskn3-44/+45
2019-02-18Change ps_len of struct pfioc_states and psn_len of structbluhm1-7/+5
2019-02-13(unsigned) means (unsigned int) which on ptrdiff_t or size_t or otherderaadt1-3/+3
2019-02-10Anchor names must not be emptykn2-2/+9
2019-02-10Unify anchor name sanity checkskn1-15/+20
2019-02-02Show the routing address selected by "route-to" in "pfctl -s states".yasuoka1-1/+11
2019-01-31Make divert-packet port accept any port specificationkn1-5/+6
2019-01-29Reuse copy_satopfaddr() when killing entrieskn3-58/+15
2019-01-29Make -N and -r mutually exclusivekn2-3/+10
2019-01-28Simplify lookups when killing entrieskn1-47/+32
2019-01-26Mention that -r does reverse DNS lookups for tables as wellkn1-3/+3
2019-01-19Use mnemonic PFCTL_SHOW_* macros, terminate string with null characterkn1-8/+7
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.