summaryrefslogtreecommitdiffstats
path: root/etc/inc/filter.inc
Commit message (Expand)AuthorAgeFilesLines
* Make sure pf rule labels never have more than 63 chars. It should fix #3208Renato Botelho2013-10-231-25/+35
* Fix #3268 - avoid pf table names conflict:Renato Botelho2013-10-161-0/+12
* use (self) instead of any for web lockoutChris Buechler2013-10-041-1/+1
* use (self) rather than any as the destination for the lockout rulesChris Buechler2013-10-041-2/+2
* Do not include disabled OpenVPN in vpn_networks and negate_networksPhil Davis2013-09-101-4/+6
* Correct typo that prevents dhcp rules from properly being generated.Ermal2013-09-101-1/+1
* Fix errant display of "0 table deleted" during filter reload on console.jim-p2013-09-091-1/+1
* Ticket #3181 do the state flushing only on down gateway detection rather than...Ermal2013-09-051-11/+5
* Revert "Revert back the behaviour to cleanup all states for 2.1 Fixes #3181 a...Ermal2013-09-051-1/+27
* Make the operation of saving old rule nearby the writing operation to be logi...Ermal2013-09-041-4/+4
* Sprinkle some unsets to reduce footprint and correct some whitespacesErmal2013-09-041-19/+17
* filter_generate_port error log function namePhil Davis2013-09-041-1/+1
* Revert back the behaviour to cleanup all states for 2.1 Fixes #3181 and relat...Ermal2013-09-031-27/+1
* Fixes #3173 if any port information exists on the rule than put it on the NEG...Ermal2013-09-031-27/+36
* touch up text, s/nat/NAT/Chris Buechler2013-09-031-2/+2
* Fix selection of IPv6 target IP for IPv6 Outbound NAT rules.Chris Buechler2013-08-171-0/+6
* Unbreak limitrules and probably pfblocker errors. Spotted-by: JimErmal2013-08-151-3/+2
* Add a parameter, off by default, to expand all alias items, including hostnamesRenato Botelho2013-08-141-7/+7
* Try to do the loading operations as close as possible to avoid any issues com...Ermal2013-08-061-4/+4
* fix text - s/occured/occurred/Chris Buechler2013-08-011-1/+1
* the state type is required/valid for all specifications of protocol, notChris Buechler2013-08-011-1/+1
* Fix up filter_pflog_start - optimize some code, and fix $retval so that it wi...jim-p2013-07-301-2/+5
* Show the name of the unresolvable alias name as well as the rule description ...jim-p2013-07-301-4/+6
* Optimization has nothing to do with limitsErmal2013-07-251-1/+1
* Fix #3106, parse 'not' rules right on destination for port forward + reflecti...Renato Botelho2013-07-251-4/+5
* Allow advanced options state-related parameters to be used for TCP, UDP and ICMPPhil Davis2013-07-241-16/+22
* Minimize inclusion of bogonsv6Phil Davis2013-07-191-3/+18
* Don't generate reflection rules if reflection is disabled for that rule.jim-p2013-07-161-13/+14
* Don't automatically add hidden rules to pass all IPv6 traffic to/from delegat...jim-p2013-07-101-18/+0
* Add independent logging choices to disable logging of bogon network rules and...jim-p2013-07-091-8/+18
* Fix typo in filter.inc. Fixes #3028.Daniel Becker2013-07-071-1/+1
* Correct DHCPv6 rules test to also include a check for DHCPv6 relay. Fixes #3074jim-p2013-07-051-1/+2
* Added previously missing class selectors cs1-cs7 plaus VA (voice-admit)Klaws--2013-06-291-2/+13
* No need for this block of code, it will always have flags by this point if th...jim-p2013-06-181-4/+0
* Ensure that we only add a state type on pass, and that we only add flags to a...jim-p2013-06-181-2/+3
* Allow user to set interval between attempts to resolve hostnames configured o...Renato Botelho2013-06-171-1/+5
* TCP flags are valid on any type of rule, don't skip them on block or reject r...Chris Buechler2013-06-141-29/+29
* Partial revert of 5b431a20dea since the introduced parameter is not working a...Renato Botelho2013-05-231-9/+4
* remove auto-added allow pfsync ruleChris Buechler2013-05-171-1/+0
* Revert "Fix alias expand for hostnames, it should fix #2941"Renato Botelho2013-05-101-1/+1
* Fix alias expand for hostnames, it should fix #2941Renato Botelho2013-05-091-1/+1
* Seems behaviour of implode does not always produce a correct config so put it...Ermal2013-04-191-2/+2
* Remove newline hereErmal2013-04-181-1/+1
* Rather test uniqueness from the filterdns itself to avoid duplicatesErmal2013-04-181-5/+4
* Do not put hostnames on the generated alias since filterdns will take care of...Ermal2013-04-181-1/+1
* Add a new parameter to return all aliases, including hosts. It fixes #2941Renato Botelho2013-04-141-5/+11
* Also ignore 'none' here on the backend to avoid letting previously broken rul...jim-p2013-04-111-2/+2
* Allow traffic initiated from host and without a default route to be sent to a...Ermal2013-04-111-1/+1
* Avoid adding URLs to filterdns.conf. It fixes #2921Renato Botelho2013-04-021-1/+1
* Do not bother with bogonsv6 if IPv6 allow is offphildd2013-03-241-1/+11
OpenPOWER on IntegriCloud