| Commit message (Expand) | Author | Age | Files | Lines |
* | Make sure pf rule labels never have more than 63 chars. It should fix #3208 | Renato Botelho | 2013-10-23 | 1 | -25/+35 |
* | Fix #3268 - avoid pf table names conflict: | Renato Botelho | 2013-10-16 | 1 | -0/+12 |
* | use (self) instead of any for web lockout | Chris Buechler | 2013-10-04 | 1 | -1/+1 |
* | use (self) rather than any as the destination for the lockout rules | Chris Buechler | 2013-10-04 | 1 | -2/+2 |
* | Do not include disabled OpenVPN in vpn_networks and negate_networks | Phil Davis | 2013-09-10 | 1 | -4/+6 |
* | Correct typo that prevents dhcp rules from properly being generated. | Ermal | 2013-09-10 | 1 | -1/+1 |
* | Fix errant display of "0 table deleted" during filter reload on console. | jim-p | 2013-09-09 | 1 | -1/+1 |
* | Ticket #3181 do the state flushing only on down gateway detection rather than... | Ermal | 2013-09-05 | 1 | -11/+5 |
* | Revert "Revert back the behaviour to cleanup all states for 2.1 Fixes #3181 a... | Ermal | 2013-09-05 | 1 | -1/+27 |
* | Make the operation of saving old rule nearby the writing operation to be logi... | Ermal | 2013-09-04 | 1 | -4/+4 |
* | Sprinkle some unsets to reduce footprint and correct some whitespaces | Ermal | 2013-09-04 | 1 | -19/+17 |
* | filter_generate_port error log function name | Phil Davis | 2013-09-04 | 1 | -1/+1 |
* | Revert back the behaviour to cleanup all states for 2.1 Fixes #3181 and relat... | Ermal | 2013-09-03 | 1 | -27/+1 |
* | Fixes #3173 if any port information exists on the rule than put it on the NEG... | Ermal | 2013-09-03 | 1 | -27/+36 |
* | touch up text, s/nat/NAT/ | Chris Buechler | 2013-09-03 | 1 | -2/+2 |
* | Fix selection of IPv6 target IP for IPv6 Outbound NAT rules. | Chris Buechler | 2013-08-17 | 1 | -0/+6 |
* | Unbreak limitrules and probably pfblocker errors. Spotted-by: Jim | Ermal | 2013-08-15 | 1 | -3/+2 |
* | Add a parameter, off by default, to expand all alias items, including hostnames | Renato Botelho | 2013-08-14 | 1 | -7/+7 |
* | Try to do the loading operations as close as possible to avoid any issues com... | Ermal | 2013-08-06 | 1 | -4/+4 |
* | fix text - s/occured/occurred/ | Chris Buechler | 2013-08-01 | 1 | -1/+1 |
* | the state type is required/valid for all specifications of protocol, not | Chris Buechler | 2013-08-01 | 1 | -1/+1 |
* | Fix up filter_pflog_start - optimize some code, and fix $retval so that it wi... | jim-p | 2013-07-30 | 1 | -2/+5 |
* | Show the name of the unresolvable alias name as well as the rule description ... | jim-p | 2013-07-30 | 1 | -4/+6 |
* | Optimization has nothing to do with limits | Ermal | 2013-07-25 | 1 | -1/+1 |
* | Fix #3106, parse 'not' rules right on destination for port forward + reflecti... | Renato Botelho | 2013-07-25 | 1 | -4/+5 |
* | Allow advanced options state-related parameters to be used for TCP, UDP and ICMP | Phil Davis | 2013-07-24 | 1 | -16/+22 |
* | Minimize inclusion of bogonsv6 | Phil Davis | 2013-07-19 | 1 | -3/+18 |
* | Don't generate reflection rules if reflection is disabled for that rule. | jim-p | 2013-07-16 | 1 | -13/+14 |
* | Don't automatically add hidden rules to pass all IPv6 traffic to/from delegat... | jim-p | 2013-07-10 | 1 | -18/+0 |
* | Add independent logging choices to disable logging of bogon network rules and... | jim-p | 2013-07-09 | 1 | -8/+18 |
* | Fix typo in filter.inc. Fixes #3028. | Daniel Becker | 2013-07-07 | 1 | -1/+1 |
* | Correct DHCPv6 rules test to also include a check for DHCPv6 relay. Fixes #3074 | jim-p | 2013-07-05 | 1 | -1/+2 |
* | Added previously missing class selectors cs1-cs7 plaus VA (voice-admit) | Klaws-- | 2013-06-29 | 1 | -2/+13 |
* | No need for this block of code, it will always have flags by this point if th... | jim-p | 2013-06-18 | 1 | -4/+0 |
* | Ensure that we only add a state type on pass, and that we only add flags to a... | jim-p | 2013-06-18 | 1 | -2/+3 |
* | Allow user to set interval between attempts to resolve hostnames configured o... | Renato Botelho | 2013-06-17 | 1 | -1/+5 |
* | TCP flags are valid on any type of rule, don't skip them on block or reject r... | Chris Buechler | 2013-06-14 | 1 | -29/+29 |
* | Partial revert of 5b431a20dea since the introduced parameter is not working a... | Renato Botelho | 2013-05-23 | 1 | -9/+4 |
* | remove auto-added allow pfsync rule | Chris Buechler | 2013-05-17 | 1 | -1/+0 |
* | Revert "Fix alias expand for hostnames, it should fix #2941" | Renato Botelho | 2013-05-10 | 1 | -1/+1 |
* | Fix alias expand for hostnames, it should fix #2941 | Renato Botelho | 2013-05-09 | 1 | -1/+1 |
* | Seems behaviour of implode does not always produce a correct config so put it... | Ermal | 2013-04-19 | 1 | -2/+2 |
* | Remove newline here | Ermal | 2013-04-18 | 1 | -1/+1 |
* | Rather test uniqueness from the filterdns itself to avoid duplicates | Ermal | 2013-04-18 | 1 | -5/+4 |
* | Do not put hostnames on the generated alias since filterdns will take care of... | Ermal | 2013-04-18 | 1 | -1/+1 |
* | Add a new parameter to return all aliases, including hosts. It fixes #2941 | Renato Botelho | 2013-04-14 | 1 | -5/+11 |
* | Also ignore 'none' here on the backend to avoid letting previously broken rul... | jim-p | 2013-04-11 | 1 | -2/+2 |
* | Allow traffic initiated from host and without a default route to be sent to a... | Ermal | 2013-04-11 | 1 | -1/+1 |
* | Avoid adding URLs to filterdns.conf. It fixes #2921 | Renato Botelho | 2013-04-02 | 1 | -1/+1 |
* | Do not bother with bogonsv6 if IPv6 allow is off | phildd | 2013-03-24 | 1 | -1/+11 |