summaryrefslogtreecommitdiffstats
path: root/etc/inc/filter.inc
Commit message (Expand)AuthorAgeFilesLines
* Only include a scheduled rule if it is strictly before the end timeRELENG_2_1_4Phil Davis2014-06-201-1/+1
* Remove extra data after space and fix pf rule syntax. It should fix #3688Renato Botelho2014-06-201-1/+1
* Do not garble the error logging messageErmal2014-03-201-3/+4
* Try to restore last working ruleset rather than staying without configuration...Ermal2014-03-201-6/+11
* Disable default allow incoming rules for 6to4 and 6rd interfaces. This rule u...Ermal2014-03-171-2/+4
* Only add dhcpv6 client allow rules if ipv6allow is setRenato Botelho2014-02-181-1/+1
* Move 'allow dhcpv6 client' rules above block bogonsv6 ones, it should fix #3395Renato Botelho2014-02-181-15/+18
* captive portal, don't generate rules for disabled portalPiBa-NL2014-02-181-0/+2
* Move this global declaration to the proper file rather than backend codeErmal2014-02-171-12/+0
* Load only the options rather than clearing the whole ruleset. This solves a p...Ermal2013-12-061-1/+1
* Remove 0.0.0.0 from automatic outbound nat rulesRenato Botelho2013-11-281-1/+1
* Fix 0.0.0.0 mask for automatic outbound NATRenato Botelho2013-11-281-1/+1
* Fix #3331. Set interface subnet as destination when VIP is in the same subnet...Renato Botelho2013-11-211-1/+4
* Add subnet to 0.0.0.0 otherwise it's not added to table, ticket #2416Renato Botelho2013-11-181-1/+1
* Remove unused variables and fix automatic nat to alias-addressRenato Botelho2013-11-131-5/+1
* Add missing count incrementRenato Botelho2013-11-131-0/+1
* Handle comma-separated list of remote networks when making vpn_networks tablePhil Davis2013-11-121-2/+5
* Unset this variable used in the loop to avoid having wrong informationErmal2013-11-071-0/+2
* Do not forget the trace in the pf.conf that something went wrong during rules...Ermal2013-11-071-1/+1
* Make sure pf rule labels never have more than 63 chars. It should fix #3208Renato Botelho2013-10-231-25/+35
* Fix #3268 - avoid pf table names conflict:Renato Botelho2013-10-161-0/+12
* use (self) instead of any for web lockoutChris Buechler2013-10-041-1/+1
* use (self) rather than any as the destination for the lockout rulesChris Buechler2013-10-041-2/+2
* Do not include disabled OpenVPN in vpn_networks and negate_networksPhil Davis2013-09-101-4/+6
* Correct typo that prevents dhcp rules from properly being generated.Ermal2013-09-101-1/+1
* Fix errant display of "0 table deleted" during filter reload on console.jim-p2013-09-091-1/+1
* Ticket #3181 do the state flushing only on down gateway detection rather than...Ermal2013-09-051-11/+5
* Revert "Revert back the behaviour to cleanup all states for 2.1 Fixes #3181 a...Ermal2013-09-051-1/+27
* Make the operation of saving old rule nearby the writing operation to be logi...Ermal2013-09-041-4/+4
* Sprinkle some unsets to reduce footprint and correct some whitespacesErmal2013-09-041-19/+17
* filter_generate_port error log function namePhil Davis2013-09-041-1/+1
* Revert back the behaviour to cleanup all states for 2.1 Fixes #3181 and relat...Ermal2013-09-031-27/+1
* Fixes #3173 if any port information exists on the rule than put it on the NEG...Ermal2013-09-031-27/+36
* touch up text, s/nat/NAT/Chris Buechler2013-09-031-2/+2
* Fix selection of IPv6 target IP for IPv6 Outbound NAT rules.Chris Buechler2013-08-171-0/+6
* Unbreak limitrules and probably pfblocker errors. Spotted-by: JimErmal2013-08-151-3/+2
* Add a parameter, off by default, to expand all alias items, including hostnamesRenato Botelho2013-08-141-7/+7
* Try to do the loading operations as close as possible to avoid any issues com...Ermal2013-08-061-4/+4
* fix text - s/occured/occurred/Chris Buechler2013-08-011-1/+1
* the state type is required/valid for all specifications of protocol, notChris Buechler2013-08-011-1/+1
* Fix up filter_pflog_start - optimize some code, and fix $retval so that it wi...jim-p2013-07-301-2/+5
* Show the name of the unresolvable alias name as well as the rule description ...jim-p2013-07-301-4/+6
* Optimization has nothing to do with limitsErmal2013-07-251-1/+1
* Fix #3106, parse 'not' rules right on destination for port forward + reflecti...Renato Botelho2013-07-251-4/+5
* Allow advanced options state-related parameters to be used for TCP, UDP and ICMPPhil Davis2013-07-241-16/+22
* Minimize inclusion of bogonsv6Phil Davis2013-07-191-3/+18
* Don't generate reflection rules if reflection is disabled for that rule.jim-p2013-07-161-13/+14
* Don't automatically add hidden rules to pass all IPv6 traffic to/from delegat...jim-p2013-07-101-18/+0
* Add independent logging choices to disable logging of bogon network rules and...jim-p2013-07-091-8/+18
* Fix typo in filter.inc. Fixes #3028.Daniel Becker2013-07-071-1/+1
OpenPOWER on IntegriCloud