aboutsummaryrefslogtreecommitdiff
path: root/sbin/pfctl
Commit message (Expand)AuthorAgeFilesLines
* pfctl: make the source limiter output match the inputKristof Provost5 hours2-2/+2
* pf: configurable action on limiter exceededKristof Provost5 hours4-33/+66
* pfctl: distinguish broadcast and PPP peer addressesKristof Provost5 hours1-3/+4
* pfctl: ifa_load() in pfctl_parser.c may attempt to read beyond the buffer.Kristof Provost5 hours1-2/+8
* pfctl tests: basic source and state limiter testsKristof Provost5 hours5-0/+10
* pfctl.8: mention -k source -k <IP>Kristof Provost5 hours1-2/+7
* pfctl: improve limiters printingKristof Provost5 hours1-12/+11
* pfctl: resolve '-s' ambiguityKristof Provost5 hours2-4/+4
* pf: convert state limiter interface to netlinkKristof Provost5 hours3-119/+82
* pf: introduce source and state limitersKristof Provost5 hours5-101/+1286
* pfctl: remove duplicate "va" entryKristof Provost2025-12-301-1/+0
* pf: convert DIOCRCLRASTATS to netlinkKristof Provost2025-12-301-1/+7
* pf: move DIOCRCLRASTATS into libpfctlKristof Provost2025-12-301-17/+1
* pfctl: allow network programs select DSCP_VA for network ToSKristof Provost2025-12-301-0/+1
* libpfctl: export a get states variant that takes a pfctl_handleKristof Provost2025-12-211-1/+1
* pfctl: report ICMP states consistently for IPv4/IPv6Kristof Provost2025-12-131-5/+0
* pfctl: move astats query into libpfctlKristof Provost2025-12-051-19/+1
* pfctl: restore '-Tload -f pf.conf' functionalityKristof Provost2025-12-011-1/+2
* pfctl(8): Fix a typo in an error messageGordon Bergling2025-11-211-1/+1
* pf: convert DIOCRGETADDRS to netlinkKristof Provost2025-11-051-1/+1
* pf: convert DIOCRSETADDRS to netlinkKristof Provost2025-10-313-14/+5
* pfctl: only set limit restore handler if limits are changedKristof Provost2025-10-291-1/+5
* pfctl: Do not warn if there is no Ethernet anchorJose Luis Duran2025-10-281-4/+1
* pfctl(8): Fix a typo in an error messageGordon Bergling2025-10-261-1/+1
* pfctl: check if the anchor exists before we attempt to flush anything from itKristof Provost2025-10-061-0/+6
* pfctl: store correct ticket typeKristof Provost2025-10-061-2/+5
* pfctl: refactor 'rule_numbers' variableKristof Provost2025-09-252-7/+9
* pfctl: print once shot rule expiration timeKristof Provost2025-09-251-1/+5
* pfctl: fix anchor handling for nat/rdr/binat anchorsKristof Provost2025-09-251-62/+79
* pfctl.8/pf.conf.5: Improve "once" bitsKristof Provost2025-09-251-1/+8
* pf: simplify expiration of 'once' rules.Kristof Provost2025-09-251-0/+3
* pfctl: fix once rulesKristof Provost2025-09-253-52/+49
* pfctl: reduce duplicate codeKristof Provost2025-09-251-15/+8
* pf: print 'once' rule expire timeKristof Provost2025-09-252-1/+13
* pfctl: deny "once" flags for match rulesKristof Provost2025-09-251-1/+7
* pfctl tests: basic 'once' rule testKristof Provost2025-09-253-0/+3
* pfctl: One shot rules can be used in pf.conf by specifying a "once" filter op...Kristof Provost2025-09-252-2/+17
* pfctl.8: -z honours -a (reset rule stats per anchor)Kristof Provost2025-09-171-1/+2
* pf: set limits before rulesKristof Provost2025-09-171-3/+57
* pfctl.8: omit preceding flag from command/modifier lists to get tagsKristof Provost2025-09-171-46/+46
* pfctl: allow tables to be defined inside anchorsKristof Provost2025-09-177-22/+256
* pfctl: remove prototypes with no matching functionKristof Provost2025-09-151-2/+0
* pfctl: ctime(3) and ctime_r(3) can fail when timestamps are way off.Kristof Provost2025-09-151-10/+25
* pf: Show pf fragment reassembly counters.Kristof Provost2025-09-151-0/+14
* pfctl: add af-to and other missing action types in print_rule()Kristof Provost2025-09-151-1/+1
* pfctl: fix anchortypes bounds testKristof Provost2025-09-151-14/+15
* pfctl: fix killing state by source and destination addressKristof Provost2025-09-101-2/+2
* pfctl: support recusive printing of tablesKristof Provost2025-09-103-14/+30
* pfctl: Use pfctl_fopenKristof Provost2025-09-101-1/+1
* pfctl: Rewrite some ugly for loopsKristof Provost2025-09-021-4/+4