summaryrefslogtreecommitdiffstats
path: root/sbin/pfctl/pfctl_parser.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* change route-to so it sends packets to IPs instead of interfaces.dlg2021-02-011-11/+2
* Sometimes a user ID was logged in pflog(4) although the logopt ofbluhm2021-01-121-2/+2
* getifaddrs() can return entries where ifa_addr is NULL. Check for thisbenno2020-12-291-2/+3
* pf(4): use CLOCK_BOOTTIME to get time_uptime(9) in userspacecheloha2020-05-151-2/+2
* Use -1 to indicate an invalid uid/gid, not UID_MAX and GID_MAX.millert2019-10-171-10/+8
* When system calls indicate an error they return -1, not some arbitraryderaadt2019-06-281-2/+2
* Fail on invalid netmasks when filling tableskn2019-03-301-2/+2
* Reuse copy_satopfaddr() when killing entrieskn2019-01-291-2/+1
* The kernel does not set the address family for the socket addressesbluhm2018-09-161-4/+11
* Avoid unneeded variable in gen_dynnode()kn2018-09-131-4/+2
* Fix netmask regression in get_dynnode()kn2018-09-111-2/+2
* Remove unused buffer from host()kn2018-09-111-10/+5
* Merge host_v{4,6}() into simpler host_ip()kn2018-09-101-45/+28
* Introduce copy_satopfaddr()kn2018-09-101-50/+26
* More __func__ to fix error messageskn2018-09-071-4/+4
* Remove wildcard address on loopack remnantskn2018-09-071-10/+3
* Remove unused af argument from unmask()kn2018-09-061-5/+5
* Move AF-specific mask logic from callers into set_ipmask()kn2018-09-051-18/+21
* Use error label in host_if()kn2018-09-051-9/+6
* Zap bits in host_v4(), use mask parameterkn2018-08-101-6/+5
* Zap v4mask and v6mask in host()kn2018-07-311-11/+10
* Simplify host()kn2018-07-301-29/+15
* Use strtonum in host()kn2018-07-281-5/+6
* Move duplicate code into new helper print_addr_str()kn2018-07-241-8/+2
* Simplify getaddrinfo() error handlingkn2018-07-241-8/+5
* 'set delay' for the generic packet delay mechanism, ok benno sashanhenning2018-07-101-11/+16
* Add "listenrepv2" for MLDv2 Listener Reports from RFC3810jca2018-07-101-2/+3
* show current synflood detection watermarks in pfctl -vsi, for the lackhenning2018-02-081-2/+7
* The divert structure was using the port number to indicate thatbluhm2017-11-281-17/+24
* add a generic packet rate matching filter. allows things likehenning2017-11-131-1/+4
* expose the half-open tcp states counter, ok bluhmhenning2017-08-141-1/+2
* add option -N (no domain resolution)benno2017-08-111-7/+10
* Since nearly 20 years the correct spelling offlorian2017-08-031-2/+1
* Allow HFSC classes to use flow queuesmikeb2017-07-191-2/+3
* Return time_uptime as value for when pf was enabled instead ofpatrick2017-06-011-4/+6
* Fixup printing of queue bandwidth specificationsmikeb2017-05-151-2/+2
* Hook up FQ-CoDel to the tree and enable configuration in the pfctl(8)mikeb2017-05-151-10/+18
* When using a /32 IPv4 interface address, pfctl(8) reports a 0.0.0.0bluhm2016-10-261-1/+3
* Let purge thread to remove once rules, not packets.sashan2016-09-031-1/+5
* Add <time.h> for time(); sort <*.h> includesguenther2016-08-261-8/+9
* interface should only be specified for root queues; found by jsgmikeb2015-09-031-2/+2
* Do not assume that asprintf() clears the pointer on failure, whichmillert2015-06-031-4/+5
* Rather than using 0xff as a placeholder for "don't check prio", use 0xff tosthen2015-02-141-3/+3
* since we inherit prio (as in, the queuing priority) from outside sources,henning2015-02-101-1/+3
* parse debug levels with strtonum, so that debug 1banana doesn't parse.tedu2015-02-071-3/+10
* Replace <sys/param.h> with <limits.h> and other less dirty headers wherederaadt2015-01-161-1/+2
* Fixup incorrect expansion of the networking mask for dynamic interfacemikeb2014-10-271-6/+26
* Remove unnecessary netinet/in_systm.h include.lteo2014-10-251-2/+1
* support "!received-on <interface>", ok dlg bennohenning2014-01-201-2/+3
* Whole bunch of (unsigned char) casts carefully added for ctype calls.deraadt2013-11-221-4/+4