src/lib/libpfctl/libpfctl.h, branch releng/14.0 FreeBSD source tree Remove $FreeBSD$: two-line .h pattern 2023-08-16T17:54:16+00:00 Warner Losh imp@FreeBSD.org 2023-08-16T17:54:16+00:00 b3e7694832e81d7a904a10f525f8797b753bf0d3 Remove /^\s*\*\n \*\s+\$FreeBSD\$$\n/ 
Remove /^\s*\*\n \*\s+\$FreeBSD\$$\n/
pfctl: Add missing state parameters in DIOCGETSTATESV2 2023-05-30T12:28:57+00:00 Kajetan Staszkiewicz vegeta@tuxpowered.net 2023-05-29T19:35:58+00:00 c45d6b0ec011d5c113e0f7dedfc0070e8464fbbc Reviewed by: kp Sponsored by: InnoGames GmbH Different Revision: https://reviews.freebsd.org/D40259 
Reviewed by:	kp
Sponsored by:	InnoGames GmbH
Different Revision:	https://reviews.freebsd.org/D40259
pf: introduce ridentifier and labels to ether rules 2023-04-26T09:14:41+00:00 Christian McDonald cmcdonald@netgate.com 2023-04-24T18:55:34+00:00 ef661d4a5bf912e4d4850faaf50664532d82541c Make Ethernet rules more similar to the usual layer 3 rules by also allowing ridentifier and labels to be set on them. Reviewed by: kp Sponsored by: Rubicon Communications, LLC ("Netgate") 
Make Ethernet rules more similar to the usual layer 3 rules by also
allowing ridentifier and labels to be set on them.

Reviewed by:	kp
Sponsored by:	Rubicon Communications, LLC ("Netgate")
pf: backport OpenBSD syntax of "scrub" option for "match" and "pass" rules 2023-04-14T07:04:06+00:00 Kajetan Staszkiewicz vegeta@tuxpowered.net 2023-04-13T16:12:59+00:00 39282ef356db25879660427de8607716a8439077 Introduce the OpenBSD syntax of "scrub" option for "match" and "pass" rules and the "set reassemble" flag. The patch is backward-compatible, pf.conf can be still written in FreeBSD-style. Obtained from: OpenBSD MFC after: never Sponsored by: InnoGames GmbH Differential Revision: https://reviews.freebsd.org/D38025 
Introduce the OpenBSD syntax of "scrub" option for "match" and "pass"
rules and the "set reassemble" flag. The patch is backward-compatible,
pf.conf can be still written in FreeBSD-style.

Obtained from:	OpenBSD
MFC after:	never
Sponsored by:	InnoGames GmbH
Differential Revision:	https://reviews.freebsd.org/D38025
pf: bridge-to 2022-11-02T14:45:23+00:00 Kristof Provost kp@FreeBSD.org 2022-09-22T17:00:11+00:00 8a8af94240084a091a1c048da027f80ee37937e7 Allow pf (l2) to be used to redirect ethernet packets to a different interface. The intended use case is to send 802.1x challenges out to a side interface, to enable AT&T links to function with pfSense as a gateway, rather than the AT&T provided hardware. Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D37193 
Allow pf (l2) to be used to redirect ethernet packets to a different
interface.

The intended use case is to send 802.1x challenges out to a side
interface, to enable AT&T links to function with pfSense as a gateway,
rather than the AT&T provided hardware.

Sponsored by:	Rubicon Communications, LLC ("Netgate")
Differential Revision:	https://reviews.freebsd.org/D37193
pf: expose syncookie active/inactive status 2022-10-31T17:14:09+00:00 Kristof Provost kp@FreeBSD.org 2022-09-24T12:47:17+00:00 444a77ca85c78d02c19622a83a2798d0c5c2117b When syncookies are in adaptive mode they may be active or inactive. Expose this status to users. Suggested by: Guido van Rooij Sponsored by: Rubicon Communications, LLC ("Netgate") 
When syncookies are in adaptive mode they may be active or inactive.
Expose this status to users.

Suggested by:	Guido van Rooij
Sponsored by:	Rubicon Communications, LLC ("Netgate")
pf: use time_to for timestamps 2022-10-05T15:52:27+00:00 Kristof Provost kp@FreeBSD.org 2022-09-29T12:45:03+00:00 1d090028d3037adffac6fde004b2ad035921bb49 Use time_t rather than uint32_t to represent the timestamps. That means we have 64 bits rather than 32 on all platforms except i386, avoiding the Y2K38 issues on most platforms. Reviewed by: Zhenlei Huang Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D36837 
Use time_t rather than uint32_t to represent the timestamps. That means
we have 64 bits rather than 32 on all platforms except i386, avoiding
the Y2K38 issues on most platforms.

Reviewed by:	Zhenlei Huang
Sponsored by:	Rubicon Communications, LLC ("Netgate")
Differential Revision:	https://reviews.freebsd.org/D36837
pf: support matching on tags for Ethernet rules 2022-06-20T08:16:20+00:00 Kristof Provost kp@FreeBSD.org 2022-05-31T12:00:52+00:00 1f61367f8d61fd6963a47296a86f553c403b5f91 Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D35362 
Sponsored by:	Rubicon Communications, LLC ("Netgate")
Differential Revision:	https://reviews.freebsd.org/D35362
pf: Add per-rule timestamps for rule and eth_rule 2022-04-22T17:53:20+00:00 Reid Linnemann rlinnemann@netgate.com 2022-04-22T11:54:51+00:00 0abcc1d2d33aef2333dab28e1ec1858cf45b314a Similar to ipfw rule timestamps, these timestamps internally are uint32_t snaps of the system time in seconds. The timestamp is CPU local and updated each time a rule or a state associated with a rule or state is matched. Reviewed by: kp Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D34970 
Similar to ipfw rule timestamps, these timestamps internally are
uint32_t snaps of the system time in seconds. The timestamp is CPU local
and updated each time a rule or a state associated with a rule or state
is matched.

Reviewed by:	kp
Sponsored by:	Rubicon Communications, LLC ("Netgate")
Differential Revision:	https://reviews.freebsd.org/D34970
libpfctl: relocate implementations of pfr_add/get/set_addrs 2022-04-04T17:14:23+00:00 Reid Linnemann rlinnemann@netgate.com 2022-04-04T14:43:38+00:00 4823489ab61dbaef4405cf03d2a48e77e593ce9c Reviewed by: kp MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D34740 
Reviewed by:	kp
MFC after:	1 week
Differential Revision:	https://reviews.freebsd.org/D34740