aboutsummaryrefslogtreecommitdiff
path: root/sbin/pfctl
Commit message (Expand)AuthorAgeFilesLines
* pfctl: move astats query into libpfctlKristof Provost16 hours1-19/+1
* pfctl: restore '-Tload -f pf.conf' functionalityKristof Provost4 days1-1/+2
* pfctl(8): Fix a typo in an error messageGordon Bergling2025-11-211-1/+1
* pf: convert DIOCRGETADDRS to netlinkKristof Provost2025-11-051-1/+1
* pf: convert DIOCRSETADDRS to netlinkKristof Provost2025-10-313-14/+5
* pfctl: only set limit restore handler if limits are changedKristof Provost2025-10-291-1/+5
* pfctl: Do not warn if there is no Ethernet anchorJose Luis Duran2025-10-281-4/+1
* pfctl(8): Fix a typo in an error messageGordon Bergling2025-10-261-1/+1
* pfctl: check if the anchor exists before we attempt to flush anything from itKristof Provost2025-10-061-0/+6
* pfctl: store correct ticket typeKristof Provost2025-10-061-2/+5
* pfctl: refactor 'rule_numbers' variableKristof Provost2025-09-252-7/+9
* pfctl: print once shot rule expiration timeKristof Provost2025-09-251-1/+5
* pfctl: fix anchor handling for nat/rdr/binat anchorsKristof Provost2025-09-251-62/+79
* pfctl.8/pf.conf.5: Improve "once" bitsKristof Provost2025-09-251-1/+8
* pf: simplify expiration of 'once' rules.Kristof Provost2025-09-251-0/+3
* pfctl: fix once rulesKristof Provost2025-09-253-52/+49
* pfctl: reduce duplicate codeKristof Provost2025-09-251-15/+8
* pf: print 'once' rule expire timeKristof Provost2025-09-252-1/+13
* pfctl: deny "once" flags for match rulesKristof Provost2025-09-251-1/+7
* pfctl tests: basic 'once' rule testKristof Provost2025-09-253-0/+3
* pfctl: One shot rules can be used in pf.conf by specifying a "once" filter op...Kristof Provost2025-09-252-2/+17
* pfctl.8: -z honours -a (reset rule stats per anchor)Kristof Provost2025-09-171-1/+2
* pf: set limits before rulesKristof Provost2025-09-171-3/+57
* pfctl.8: omit preceding flag from command/modifier lists to get tagsKristof Provost2025-09-171-46/+46
* pfctl: allow tables to be defined inside anchorsKristof Provost2025-09-177-22/+256
* pfctl: remove prototypes with no matching functionKristof Provost2025-09-151-2/+0
* pfctl: ctime(3) and ctime_r(3) can fail when timestamps are way off.Kristof Provost2025-09-151-10/+25
* pf: Show pf fragment reassembly counters.Kristof Provost2025-09-151-0/+14
* pfctl: add af-to and other missing action types in print_rule()Kristof Provost2025-09-151-1/+1
* pfctl: fix anchortypes bounds testKristof Provost2025-09-151-14/+15
* pfctl: fix killing state by source and destination addressKristof Provost2025-09-101-2/+2
* pfctl: support recusive printing of tablesKristof Provost2025-09-103-14/+30
* pfctl: Use pfctl_fopenKristof Provost2025-09-101-1/+1
* pfctl: Rewrite some ugly for loopsKristof Provost2025-09-021-4/+4
* pf: fix ICMP type/code representationKristof Provost2025-09-021-2/+2
* pf: Add prefer-ipv6-nexthop option for route-to poolsKajetan Staszkiewicz2025-08-297-20/+42
* pfctl.8: small cleanupsKristof Provost2025-08-201-12/+12
* pfctl: zero the number of added/deleted addressesKristof Provost2025-08-181-0/+3
* pfctl: memset the pfctl struct in pfctl_reset()Kristof Provost2025-08-051-0/+1
* pf: also allocate ethernet anchors from a UMA zoneKristof Provost2025-08-051-0/+1
* pf: allocate pf_kanchor from a poolKristof Provost2025-08-051-0/+1
* pf: convert DIOCRDELADDRS to netlinkKristof Provost2025-08-051-1/+1
* pf: convert DIOCRADDADDRS to netlinkKristof Provost2025-08-051-1/+1
* pf: Use different address family for source and redirection addressKajetan Staszkiewicz2025-08-015-44/+40
* pfctl: Use sa_family_t for af instead of intKajetan Staszkiewicz2025-08-011-3/+4
* pflog: improve uid loggingKristof Provost2025-07-152-3/+2
* pfctl: getifaddrs() can return entries where ifa_addr is NULLKristof Provost2025-07-151-1/+2
* pfctl tests: verify port range validationKristof Provost2025-07-153-0/+3
* pfctl: Fail to parse rules with invalid rangesKristof Provost2025-07-151-3/+36
* pfctl tests: avoid the synproxy warningKristof Provost2025-07-152-2/+2