summaryrefslogtreecommitdiffstats
path: root/sbin/pfctl
Commit message (Collapse)AuthorAgeFilesLines
* Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-10-191-6/+10
|\
| * MFC r306614:sevan2016-10-161-6/+10
| | | | | | | | | | | | | | | | | | Note the version PF first appeared in FreeBSD & from which version it was ported from. Address the contractions raised by igor. PR: 212574 Approved by: bcr (mentor) Differential Revision: https://reviews.freebsd.org/D8105
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-08-171-3/+3
|\ \ | |/
| * MFC r303663:kp2016-08-171-3/+3
| | | | | | | | | | | | | | | | | | pfctl: Allow TOS bits to be cleared TOS value 0 is valid, so use 256 as an invalid value rather than zero. This allows users to enforce TOS == 0 with pf. Reported by: Radek Krejča <radek.krejca@starnet.cz>
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-08-101-0/+10
|\ \ | |/
| * MFC r303760:loos2016-08-091-0/+10
| | | | | | | | | | | | | | | | | | | | Fix a regression in pf.conf while parsing the 'interval' keyword. The bug was introduced by r287009. PR: 210924 Submitted by: kp@ Sponsored by: Rubicon Communications (Netgate)
* | Merge remote-tracking branch 'origin/stable/10' into develLuiz Otavio O Souza2016-05-231-3/+12
|\ \ | |/
| * MFC r297984:loos2016-05-231-3/+12
| | | | | | | | | | | | | | | | | | | | Make pfctl(8) more flexible when parsing bandwidth values. This is the current behaviour in OpenBSD and a similar patch exist in pfSense too. Obtained from: OpenBSD (partly - rev. 1.625) Sponsored by: Rubicon Communications (Netgate)
* | Revert dummynet.RELENG_10.diff partly.Luiz Otavio O Souza2016-05-231-12/+4
| |
* | Merge remote-tracking branch 'origin/stable/10' into develLuiz Otavio O Souza2016-04-174-11/+484
|\ \ | |/
| * MFC r287009, r287120 and r298131:loos2016-04-164-9/+149
| | | | | | | | | | | | | | | | | | | | | | | | | | Add ALTQ(9) support for the CoDel algorithm. CoDel is a parameterless queue discipline that handles variable bandwidth and RTT. It can be used as the single queue discipline on an interface or as a sub discipline of existing queue disciplines such as PRIQ, CBQ, HFSC, FAIRQ. Obtained from: pfSense Sponsored by: Rubicon Communications (Netgate)
| * Fix the build.loos2016-04-163-3/+3
| | | | | | | | | | pointy hat to: loos Reported by: gjb, Herbert J. Skuhra
| * MFC r284777, r284814, r284863 and r298088:loos2016-04-164-4/+337
| | | | | | | | | | | | | | | | ALTQ FAIRQ discipline import from DragonFLY. Differential Revision: https://reviews.freebsd.org/D2847 Obtained from: pfSense Sponsored by: Rubicon Communications (Netgate)
* | Revert "MFC r284777:"Luiz Otavio O Souza2016-04-174-337/+4
| | | | | | | | | | | | This reverts commit c548a571ceaeae698d02b862b4170d015a265ba7. TAG: FAIRQ
* | Revert "MFC r287009:"Luiz Otavio O Souza2016-04-174-149/+9
| | | | | | | | | | | | This reverts commit 9622cc803af75551a6623d5d9c5311f1e0af1cb5. TAG: CODEL
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-03-041-1/+1
|\ \ | |/
| * MFC 285730gnn2016-03-031-1/+1
| | | | | | | | | | | | | | | | Only report the lack of ALTQ support if pfctl is using verbose (-v) mode. PR: 194935 Submitted by: Jim Thompson Approved by: re (gjb)
* | Importing pfSense patch pfaltq_interface_bw.diffLuiz Otavio O Souza2016-02-171-8/+5
| | | | | | | | Sets default speed to 1G.
* | Revert "Importing pfSense patch pfaltq_interface_bw.diff"Luiz Otavio O Souza2016-02-171-5/+8
| | | | | | | | This reverts commit 9b3c3fc58b6b3162259b33fc56746f42a48e0301.
* | Importing pfSense patch pf_static_tracker.diffLuiz Otavio O Souza2016-01-283-1/+25
| | | | | | | | This version fixes the issue with 'State Creations' in pfctl -vvsr.
* | Revert "Importing pfSense patch pf_static_tracker.diff"Luiz Otavio O Souza2016-01-283-25/+1
| | | | | | | | This reverts commit 9068fb423dfecae0f8b611d4bc558dd6cb2e2bd7.
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2015-12-171-0/+1
|\ \ | |/
| * MFC r290236kp2015-12-151-0/+1
| | | | | | | | | | | | | | | | | | | | | | pfctl: Fix uninitialised veriable In pfctl_set_debug() we used 'level' without ever initialising it. We correctly parsed the option, but them failed to actually assign the parsed value to 'level' before performing to ioctl() to configure the debug level. PR: 202996 Submitted by: Andrej Kolontai
* | MFC r287009:Luiz Otavio O Souza2015-11-114-9/+149
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add ALTQ(9) support for the CoDel algorithm. CoDel is a parameterless queue discipline that handles variable bandwidth and RTT. It can be used as the single queue discipline on an interface or as a sub discipline of existing queue disciplines such as PRIQ, CBQ, HFSC, FAIRQ. Differential Revision: https://reviews.freebsd.org/D3272 Reviewd by: rpaulo, gnn (previous version) Obtained from: pfSense Sponsored by: Rubicon Communications (Netgate) TAG: CODEL
* | MFC r284777:Luiz Otavio O Souza2015-11-114-4/+337
| | | | | | | | | | | | | | | | | | | | | | | | ALTQ FAIRQ discipline import from DragonFLY Differential Revision: https://reviews.freebsd.org/D2847 Reviewed by: glebius, wblock(manpage) Approved by: gnn(mentor) Obtained from: pfSense Sponsored by: Netgate TAG: FAIRQ
* | Revert "Importing pfSense patch fairq.RELENG_10.diff"Luiz Otavio O Souza2015-11-114-339/+5
| | | | | | | | | | | | This reverts commit 570dae5561e54cd2703f546b04a3fa029c92dc62. TAG: FAIRQ
* | Revert "Importing pfSense patch altq_codel.diff"Luiz Otavio O Souza2015-11-114-174/+34
| | | | | | | | | | | | This reverts commit cf3bb1a7166bec431631defe01c8d4e706a99638. TAG: CODEL
* | Importing pfSense patch pf_static_tracker.diffRenato Botelho2015-08-173-1/+25
| |
* | Importing pfSense patch divert.RELENG_10.diffRenato Botelho2015-08-172-2/+28
| |
* | Importing pfSense patch altq_codel.diffRenato Botelho2015-08-174-34/+174
| |
* | Importing pfSense patch pf_802.1p.diffRenato Botelho2015-08-172-0/+164
| |
* | Importing pfSense patch pfaltq_interface_bw.diffRenato Botelho2015-08-171-8/+5
| |
* | Importing pfSense patch pf_match.diffRenato Botelho2015-08-172-2/+6
| |
* | Importing pfSense patch fairq.RELENG_10.diffRenato Botelho2015-08-174-5/+339
| |
* | Importing pfSense patch schedule_label.RELENG_10.diffRenato Botelho2015-08-172-3/+73
| |
* | Importing pfSense patch binat.RELENG_10.diffRenato Botelho2015-08-171-27/+35
| |
* | Importing pfSense patch dummynet.RELENG_10.diffRenato Botelho2015-08-172-4/+66
| |
* | Importing pfSense patch hfscconfig.RELENG_10.diffRenato Botelho2015-08-171-7/+0
| |
* | Importing pfSense patch dscp.RELENG_10.diffRenato Botelho2015-08-172-4/+70
|/
* MFC r259916:bz2014-08-164-4/+35
| | | | | | | | | | Use feature_present(3) to determine whether to open an INET or an INET6 socket when needed to allow pfctl to work on noinet and noinet6 kernels (and try to provide a fallback using AF_LINK as best effort). Adjust the Makefile to also respect relevant src.conf(5) options for compile time decisions on INET and INET6 support. Reviewed by: glebius (no objections)
* Merge r261882, r261898, r261937, r262760, r262799:glebius2014-03-111-6/+7
| | | | | | | | | | | | | | Once pf became not covered by a single mutex, many counters in it became race prone. Some just gather statistics, but some are later used in different calculations. A real problem was the race provoked underflow of the states_cur counter on a rule. Once it goes below zero, it wraps to UINT32_MAX. Later this value is used in pf_state_expires() and any state created by this rule is immediately expired. Thus, make fields states_cur, states_tot and src_nodes of struct pf_rule be counter(9)s.
* - Get rid of #ifdef __FreeBSD__.glebius2012-09-291-21/+8
| | | | - Use correct format when printing uint64_t.
* Minor mdoc fix.joel2012-09-141-2/+2
|
* o Create directory sys/netpfil, where all packet filters shouldglebius2012-09-1425-2261/+17366
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | reside, and move there ipfw(4) and pf(4). o Move most modified parts of pf out of contrib. Actual movements: sys/contrib/pf/net/*.c -> sys/netpfil/pf/ sys/contrib/pf/net/*.h -> sys/net/ contrib/pf/pfctl/*.c -> sbin/pfctl contrib/pf/pfctl/*.h -> sbin/pfctl contrib/pf/pfctl/pfctl.8 -> sbin/pfctl contrib/pf/pfctl/*.4 -> share/man/man4 contrib/pf/pfctl/*.5 -> share/man/man5 sys/netinet/ipfw -> sys/netpfil/ipfw The arguable movement is pf/net/*.h -> sys/net. There are future plans to refactor pf includes, so I decided not to break things twice. Not modified bits of pf left in contrib: authpf, ftp-proxy, tftp-proxy, pflogd. The ipfw(4) movement is planned to be merged to stable/9, to make head and stable match. Discussed with: bz, luigi
* Switch the default WARNS level for sbin/ to 6.ru2009-10-191-0/+1
| | | | Submitted by: Ulrich Spörlein
* Link pf 4.1 to the build:mlaier2007-07-031-0/+2
| | | | | | | | - move ftp-proxy from libexec to usr.sbin - add tftp-proxy - new altq mtag link Approved by: re (kensmith)
* Add missing library dependencies.ru2006-04-131-1/+1
|
* Adapt Makefiles for pfctl(8) and authpf(8) to 3.7 sources.mlaier2005-05-031-0/+1
|
* Remove -I from CFLAGS. This splipped in with the 3.5 import (as I wasmlaier2004-10-031-1/+0
| | | | | | building on a box with older pfvar.h installed). Didn't intend to commit it. Requested by: ru (on a C&P to ipfw's Makefile)
* Removed redundant and unsafe BINDIR redefinition.ru2004-07-071-1/+0
|
OpenPOWER on IntegriCloud