summaryrefslogtreecommitdiffstats
path: root/etc/inc/filter.inc
Commit message (Expand)AuthorAgeFilesLines
* Fix #3106, parse 'not' rules right on destination for port forward + reflecti...Renato Botelho2013-07-251-4/+5
* remove auto-added allow rule for pfsyncChris Buechler2013-05-171-1/+0
* Use the process name rather to avoid the infamous file not found errorWarren Baker2013-03-081-3/+3
* Merge improvements to filterdns daemonErmal2013-01-041-10/+10
* Pass -S to tcpdump to avoid an increase in memory consumption over time.jim-p2013-01-031-2/+2
* Fix reference to limitrulesjim-p2012-10-041-1/+1
* Make sure that the limits are included in the normal ruleset, otherwise pf wi...smos2012-10-021-0/+1
* Simplify schedules code and some styly nitsErmal2012-08-301-33/+13
* Be consistent on formatting to easy readingErmal2012-08-291-18/+21
* Put configured limits on rules.limits file and load them before loading the r...Ermal2012-06-111-34/+26
* Wrong branchErmal2012-06-051-2/+0
* Import OpenVPN cisco style radius attributes applying policy to logged in use...Ermal2012-06-051-0/+2
* Up the default for tables to 3000jim-p2012-05-291-4/+3
* Add a knob to tune the maximum number of tables that can be defined, the pf d...jim-p2012-05-291-5/+9
* Switch to a common function to determine anti-lockout ports, and fix a bug th...jim-p2012-05-251-13/+24
* go back to scrub rather than "scrub in", the latter breaks MSS clamping for e...Chris Buechler2012-04-231-3/+3
* Add alias support to static routes (needs some testing) Ticket #2239jim-p2012-04-101-18/+19
* Don't put an extra space here or later tests will fail to match this as a pas...jim-p2012-03-141-1/+1
* For nat reflection inetd rules, udp/dgram requires wait, instead of nowait/0....jim-p2012-02-221-1/+3
* Add nat rule if the target is in a subnet handled by a static route whose gat...Erik Fonnesbeck2012-02-041-0/+12
* Add static route subnets if their gateway is within the source subnet for the...Erik Fonnesbeck2012-02-041-3/+15
* Use the specific IP for NAT IP in filter_generate_reflection_nat to prevent a...Erik Fonnesbeck2012-02-041-3/+20
* Only add these lines if there is both an IP address and CIDR. Fixes #1882Erik Fonnesbeck2012-01-201-4/+6
* Respect the value of the per-rule "disable reply-to" checkbox.jim-p2012-01-101-1/+1
* Add a checkbox that disabled automatically generates negate rules for directl...smos2011-12-201-1/+1
* until 2.0.1 is tagged, Revert "Add a checkbox that disabled automatically gen...RELENG_2_0_1Chris Buechler2011-12-201-1/+1
* Add a checkbox that disabled automatically generates negate rules for directl...smos2011-12-201-1/+1
* Use quick on DHCP server rules. Should fix #2041jim-p2011-12-121-5/+5
* Concatenate array, using array_merge() will clobber numerical gateway group e...smos2011-11-271-1/+1
* Shorten the NEGATE rule label as these are too longsmos2011-10-211-1/+1
* Remove the old direct_networks table which is not used throughout the filter ...smos2011-10-131-7/+20
* Add no nat/rdr rules for carp protocol so people do not screw their setups.Ermal2011-10-131-1/+3
* Disable could not find gateway for FOO log message. It is not causing any tr...Scott Ullrich2011-10-111-1/+1
* Remove references to undeclared tableErmal2011-09-071-4/+2
* Revert "Make the webConfigurator lockout rule to catch even edp protocol so t...Ermal2011-08-301-1/+1
* Make the webConfigurator lockout rule to catch even edp protocol so that xmlr...Ermal2011-08-301-1/+1
* Fix VPN network listing for OpenVPN, and also add tunnel networks to this list.jim-p2011-08-241-2/+5
* Revert "Make initial changes to allow pfSense to work in a jail."Andrew Thompson2011-08-171-2/+0
* Make initial changes to allow pfSense to work in a jail.Andrew Thompson2011-08-171-0/+2
* Resolves #1731. Correctly handle nested alias that have hostnames. While here...Ermal2011-08-151-2/+4
* Revert "Feature#1603. URL table aliases should be usable within network type ...Ermal2011-08-151-20/+1
* Revert "Feature #1603. Correct nested urltable alias code to be more fullproo...Ermal2011-08-151-12/+15
* Add yet another intermediate config write during pacakge processing which bre...Ermal2011-08-031-2/+0
* Silence pfctl -d errorsScott Ullrich2011-07-291-1/+1
* Do not add any reply-to information to rules with action match. Reported-by: ...Ermal2011-07-281-1/+1
* Prevent php from coring if the wrong parameters are passed to ip2longErmal2011-07-271-2/+11
* Add a flag that defaults to on allowing the control of delete states from ext...Scott Ullrich2011-07-251-3/+5
* Ticket #1552. Do not allow route-to to be set on block/reject rules for now. ...Ermal2011-07-151-1/+1
* Actually do pass an argument for second -b to avoid matching more tha suppose...Ermal2011-07-061-0/+2
* Ticket #1646. Put netmasks of /32 to the parameters of pfctl -b to avoid that...Ermal2011-07-061-2/+2
OpenPOWER on IntegriCloud