| Commit message (Expand) | Author | Age | Files | Lines |
* | Use _vip as identified for CARP vip IPs to allow easier upgrade code. This wa... | Ermal | 2013-12-06 | 1 | -1/+4 |
* | Load only the options and nothing else | Ermal | 2013-12-06 | 1 | -1/+1 |
* | Remove 0.0.0.0 from automatic outbound nat rules | Renato Botelho | 2013-11-28 | 1 | -1/+1 |
* | Remove references to _vip interface and provide proper configuration for carp... | Ermal | 2013-11-28 | 1 | -5/+1 |
* | fix 0.0.0.0 subnet for automatic outbound NAT rules, fixes #2416 | Renato Botelho | 2013-11-26 | 1 | -1/+1 |
* | Fix #3331. Set interface subnet as destination when VIP is in the same subnet... | Renato Botelho | 2013-11-21 | 1 | -1/+4 |
* | FreeBSD 10 pf does not have a limit for table entries | Ermal | 2013-11-21 | 1 | -3/+0 |
* | Add gettext() to recently added strings | Renato Botelho | 2013-11-18 | 1 | -9/+9 |
* | Add an option to return outbound NAT automatic to nat hosts with description,... | Renato Botelho | 2013-11-18 | 1 | -11/+41 |
* | Add subnet to 0.0.0.0 otherwise it's not added to table, ticket #2416 | Renato Botelho | 2013-11-18 | 1 | -1/+1 |
* | Make sure automatic rules are created even if mode is not set, ticket #2416 | Renato Botelho | 2013-11-18 | 1 | -1/+3 |
* | Split automatic to nat hosts fill into a function to be able to call it from ... | Renato Botelho | 2013-11-14 | 1 | -95/+132 |
* | Remove unused variables and fix automatic nat to alias-address | Renato Botelho | 2013-11-14 | 1 | -5/+1 |
* | Add hybrid and disabled outbound NAT, fixes #2416: | Renato Botelho | 2013-11-13 | 1 | -9/+14 |
* | Merge pull request #850 from phil-davis/master | Renato Botelho | 2013-11-12 | 1 | -2/+5 |
|\ |
|
| * | Handle comma-separated list of remote networks when making vpn_networks table | Phil Davis | 2013-11-09 | 1 | -2/+5 |
* | | Add an option to set no-sync on rules to keep states from being synced via pf... | Renato Botelho | 2013-11-12 | 1 | -1/+6 |
|/ |
|
* | Unset this variable used in the loop to avoid having wrong information | Ermal | 2013-11-07 | 1 | -0/+2 |
* | Do not forget the trace in the pf.conf that something went wrong during rules... | Ermal | 2013-11-07 | 1 | -1/+1 |
* | Make sure pf rule labels never have more than 63 chars. It should fix #3208 | Renato Botelho | 2013-10-23 | 1 | -25/+35 |
* | Fix #3268 - avoid pf table names conflict: | Renato Botelho | 2013-10-16 | 1 | -0/+12 |
* | use (self) instead of any for web lockout | Chris Buechler | 2013-10-04 | 1 | -1/+1 |
* | use (self) rather than any as the destination for the lockout rules | Chris Buechler | 2013-10-04 | 1 | -2/+2 |
* | outboundnat, disable checkbox | PiBa-NL | 2013-09-16 | 1 | -0/+2 |
* | Correct typo that prevents dhcp rules from properly being generated. | Ermal | 2013-09-10 | 1 | -1/+1 |
* | Do not include disabled OpenVPN in vpn_networks and negate_networks | Phil Davis | 2013-09-09 | 1 | -4/+6 |
* | Fix errant display of "0 table deleted" during filter reload on console. | jim-p | 2013-09-09 | 1 | -1/+1 |
* | Ticket #3181 do the state flushing only on down gateway detection rather than... | Ermal | 2013-09-05 | 1 | -11/+5 |
* | Make the operation of saving old rule nearby the writing operation to be logi... | Ermal | 2013-09-04 | 1 | -4/+4 |
* | Sprinkle some unsets to reduce footprint and correct some whitespaces | Ermal | 2013-09-04 | 1 | -19/+17 |
* | filter_generate_port error log function name | Phil Davis | 2013-09-03 | 1 | -1/+1 |
* | Fixes #3173 if any port information exists on the rule than put it on the NEG... | Ermal | 2013-09-03 | 1 | -27/+36 |
* | touch up text, s/nat/NAT/ | Chris Buechler | 2013-09-03 | 1 | -2/+2 |
* | Fix selection of IPv6 target IP for IPv6 Outbound NAT rules. | Chris Buechler | 2013-08-17 | 1 | -0/+6 |
* | Unbreak limitrules and probably pfblocker errors. Spotted-by: Jim | Ermal | 2013-08-15 | 1 | -3/+2 |
* | Try to do the loading operations as close as possible to avoid any issues com... | Ermal | 2013-08-06 | 1 | -4/+4 |
* | fix text - s/occured/occurred/ | Chris Buechler | 2013-08-01 | 1 | -1/+1 |
* | the state type is required/valid for all specifications of protocol, not | Chris Buechler | 2013-08-01 | 1 | -1/+1 |
* | Fix up filter_pflog_start - optimize some code, and fix $retval so that it wi... | jim-p | 2013-07-30 | 1 | -2/+5 |
* | Show the name of the unresolvable alias name as well as the rule description ... | jim-p | 2013-07-30 | 1 | -4/+6 |
* | Optimization has nothing to do with limits | Ermal | 2013-07-25 | 1 | -1/+1 |
* | Fix #3106, parse 'not' rules right on destination for port forward + reflecti... | Renato Botelho | 2013-07-25 | 1 | -4/+5 |
* | Allow advanced options state-related parameters to be used for TCP, UDP and ICMP | Phil Davis | 2013-07-24 | 1 | -16/+22 |
* | Minimize inclusion of bogonsv6 | Phil Davis | 2013-07-18 | 1 | -3/+18 |
* | Don't generate reflection rules if reflection is disabled for that rule. | jim-p | 2013-07-16 | 1 | -13/+14 |
* | Don't automatically add hidden rules to pass all IPv6 traffic to/from delegat... | jim-p | 2013-07-10 | 1 | -18/+0 |
* | Add independent logging choices to disable logging of bogon network rules and... | jim-p | 2013-07-09 | 1 | -8/+18 |
* | Implement URL Table aliases for ports instead of IP addresses | Renato Botelho | 2013-07-08 | 1 | -0/+7 |
* | Fix typo in filter.inc. Fixes #3028. | Daniel Becker | 2013-07-07 | 1 | -1/+1 |
* | Correct DHCPv6 rules test to also include a check for DHCPv6 relay. Fixes #3074 | jim-p | 2013-07-05 | 1 | -1/+2 |