aboutsummaryrefslogtreecommitdiff
path: root/sbin/pfctl
Commit message (Expand)AuthorAgeFilesLines
...
* pfctl: deny "once" flags for match rulesKristof Provost2025-09-251-1/+7
* pfctl tests: basic 'once' rule testKristof Provost2025-09-253-0/+3
* pfctl: One shot rules can be used in pf.conf by specifying a "once" filter op...Kristof Provost2025-09-252-2/+17
* pfctl.8: -z honours -a (reset rule stats per anchor)Kristof Provost2025-09-171-1/+2
* pf: set limits before rulesKristof Provost2025-09-171-3/+57
* pfctl.8: omit preceding flag from command/modifier lists to get tagsKristof Provost2025-09-171-46/+46
* pfctl: allow tables to be defined inside anchorsKristof Provost2025-09-177-22/+256
* pfctl: remove prototypes with no matching functionKristof Provost2025-09-151-2/+0
* pfctl: ctime(3) and ctime_r(3) can fail when timestamps are way off.Kristof Provost2025-09-151-10/+25
* pf: Show pf fragment reassembly counters.Kristof Provost2025-09-151-0/+14
* pfctl: add af-to and other missing action types in print_rule()Kristof Provost2025-09-151-1/+1
* pfctl: fix anchortypes bounds testKristof Provost2025-09-151-14/+15
* pfctl: fix killing state by source and destination addressKristof Provost2025-09-101-2/+2
* pfctl: support recusive printing of tablesKristof Provost2025-09-103-14/+30
* pfctl: Use pfctl_fopenKristof Provost2025-09-101-1/+1
* pfctl: Rewrite some ugly for loopsKristof Provost2025-09-021-4/+4
* pf: fix ICMP type/code representationKristof Provost2025-09-021-2/+2
* pf: Add prefer-ipv6-nexthop option for route-to poolsKajetan Staszkiewicz2025-08-297-20/+42
* pfctl.8: small cleanupsKristof Provost2025-08-201-12/+12
* pfctl: zero the number of added/deleted addressesKristof Provost2025-08-181-0/+3
* pfctl: memset the pfctl struct in pfctl_reset()Kristof Provost2025-08-051-0/+1
* pf: also allocate ethernet anchors from a UMA zoneKristof Provost2025-08-051-0/+1
* pf: allocate pf_kanchor from a poolKristof Provost2025-08-051-0/+1
* pf: convert DIOCRDELADDRS to netlinkKristof Provost2025-08-051-1/+1
* pf: convert DIOCRADDADDRS to netlinkKristof Provost2025-08-051-1/+1
* pf: Use different address family for source and redirection addressKajetan Staszkiewicz2025-08-015-44/+40
* pfctl: Use sa_family_t for af instead of intKajetan Staszkiewicz2025-08-011-3/+4
* pflog: improve uid loggingKristof Provost2025-07-152-3/+2
* pfctl: getifaddrs() can return entries where ifa_addr is NULLKristof Provost2025-07-151-1/+2
* pfctl tests: verify port range validationKristof Provost2025-07-153-0/+3
* pfctl: Fail to parse rules with invalid rangesKristof Provost2025-07-151-3/+36
* pfctl tests: avoid the synproxy warningKristof Provost2025-07-152-2/+2
* pf: synproxy should be processing incoming SYN packets only.Kristof Provost2025-07-151-0/+4
* pfctl: Accommodate a basename(3) that takes a non-const parameterKristof Provost2025-07-151-6/+9
* pf: rename PF_OPT_TABLE_PREFIX to PF_OPTIMIZER_TABLE_PFXKristof Provost2025-07-122-4/+3
* pfctl.8: Mention hostid and checksumKristof Provost2025-07-121-1/+4
* pfctl: restore '.' at the end of these errorsKristof Provost2025-07-121-2/+2
* pfctl: replace TAILQ concatenation loop with TAILQ_CONCATKristof Provost2025-07-122-25/+6
* pfctl: Fail on missing anchorKristof Provost2025-07-121-14/+4
* pfctl: Do the actual pfr_strerror() to pf_strerror() renameKristof Provost2025-07-125-13/+13
* pfctl: Unify error message for nonexisting anchorsKristof Provost2025-07-123-22/+23
* pfctl: Refine error messageKristof Provost2025-07-121-1/+1
* pfctl: Merge radix_perror() into simpler warnx()/errx() usageKristof Provost2025-07-121-21/+11
* pfctl: Fix 32-bit build.Dag-Erling Smørgrav2025-07-091-2/+2
* pfctl tests: use require.kmods instead of manual check for pfSiva Mahadevan2025-07-091-21/+4
* pfctl tests: macro test requires pf to be loadedKristof Provost2025-07-091-0/+1
* pfctl.8: Further document recursive flush behaviourKristof Provost2025-07-091-1/+14
* pfctl: Print the main ruleset/anchor as "/" not "<root>" for consistencyKristof Provost2025-07-091-2/+2
* pfctl: recursively flush rules and tablesKristof Provost2025-07-096-51/+277
* pfctl: Avoid optimizing empty rulesetsKristof Provost2025-07-091-1/+4