summaryrefslogtreecommitdiffstats
path: root/etc/inc/filter.inc
Commit message (Expand)AuthorAgeFilesLines
* check gateway for IPv6 also for reply-to rules.PiBa-NL2014-04-191-1/+1
* Switch over to filterlog sooner than laterErmal2014-04-141-13/+3
* Use proper variable name for the interfaceErmal2014-03-281-1/+1
* Log everything when selected to do soErmal2014-03-261-93/+93
* Correct the generation of antifpoof rules with tracker. Also honor the log di...Ermal2014-03-261-4/+3
* Give each rule hardcoded on the ruleset a tracker so log entries give up prop...Ermal2014-03-261-103/+183
* Do not garble the error logging messageErmal2014-03-201-3/+4
* Try to restore last working ruleset rather than staying without configuration...Ermal2014-03-201-6/+11
* Disable default allow incoming rules for 6to4 and 6rd interfaces. This rule u...Ermal2014-03-171-2/+4
* Only add dhcpv6 client allow rules if ipv6allow is setRenato Botelho2014-02-181-1/+1
* Move 'allow dhcpv6 client' rules above block bogonsv6 ones, it should fix #3395Renato Botelho2014-02-181-15/+18
* Merge pull request #891 from PiBa-NL/captive_disableRenato Botelho2014-02-181-0/+2
|\
| * captive portal, don't generate rules for disabled portalPiBa-NL2014-01-251-0/+2
* | Move this global declaration to the proper file rather than backend codeErmal2014-02-171-12/+0
* | fix syntaxRenato Botelho2014-01-021-1/+1
* | Generate a tracker id for the filter rules for now. Maybe for nat rules as well?Ermal2013-12-311-2/+5
* | Use _vip as identified for CARP vip IPs to allow easier upgrade code. This wa...Ermal2013-12-061-1/+4
* | Load only the options and nothing elseErmal2013-12-061-1/+1
* | Remove 0.0.0.0 from automatic outbound nat rulesRenato Botelho2013-11-281-1/+1
* | Remove references to _vip interface and provide proper configuration for carp...Ermal2013-11-281-5/+1
* | fix 0.0.0.0 subnet for automatic outbound NAT rules, fixes #2416Renato Botelho2013-11-261-1/+1
* | Fix #3331. Set interface subnet as destination when VIP is in the same subnet...Renato Botelho2013-11-211-1/+4
* | FreeBSD 10 pf does not have a limit for table entriesErmal2013-11-211-3/+0
* | Add gettext() to recently added stringsRenato Botelho2013-11-181-9/+9
* | Add an option to return outbound NAT automatic to nat hosts with description,...Renato Botelho2013-11-181-11/+41
* | Add subnet to 0.0.0.0 otherwise it's not added to table, ticket #2416Renato Botelho2013-11-181-1/+1
* | Make sure automatic rules are created even if mode is not set, ticket #2416Renato Botelho2013-11-181-1/+3
* | Split automatic to nat hosts fill into a function to be able to call it from ...Renato Botelho2013-11-141-95/+132
* | Remove unused variables and fix automatic nat to alias-addressRenato Botelho2013-11-141-5/+1
* | Add hybrid and disabled outbound NAT, fixes #2416:Renato Botelho2013-11-131-9/+14
* | Merge pull request #850 from phil-davis/masterRenato Botelho2013-11-121-2/+5
|\ \
| * | Handle comma-separated list of remote networks when making vpn_networks tablePhil Davis2013-11-091-2/+5
| |/
* | Add an option to set no-sync on rules to keep states from being synced via pf...Renato Botelho2013-11-121-1/+6
|/
* Unset this variable used in the loop to avoid having wrong informationErmal2013-11-071-0/+2
* Do not forget the trace in the pf.conf that something went wrong during rules...Ermal2013-11-071-1/+1
* Make sure pf rule labels never have more than 63 chars. It should fix #3208Renato Botelho2013-10-231-25/+35
* Fix #3268 - avoid pf table names conflict:Renato Botelho2013-10-161-0/+12
* use (self) instead of any for web lockoutChris Buechler2013-10-041-1/+1
* use (self) rather than any as the destination for the lockout rulesChris Buechler2013-10-041-2/+2
* outboundnat, disable checkboxPiBa-NL2013-09-161-0/+2
* Correct typo that prevents dhcp rules from properly being generated.Ermal2013-09-101-1/+1
* Do not include disabled OpenVPN in vpn_networks and negate_networksPhil Davis2013-09-091-4/+6
* Fix errant display of "0 table deleted" during filter reload on console.jim-p2013-09-091-1/+1
* Ticket #3181 do the state flushing only on down gateway detection rather than...Ermal2013-09-051-11/+5
* Make the operation of saving old rule nearby the writing operation to be logi...Ermal2013-09-041-4/+4
* Sprinkle some unsets to reduce footprint and correct some whitespacesErmal2013-09-041-19/+17
* filter_generate_port error log function namePhil Davis2013-09-031-1/+1
* Fixes #3173 if any port information exists on the rule than put it on the NEG...Ermal2013-09-031-27/+36
* touch up text, s/nat/NAT/Chris Buechler2013-09-031-2/+2
* Fix selection of IPv6 target IP for IPv6 Outbound NAT rules.Chris Buechler2013-08-171-0/+6
OpenPOWER on IntegriCloud