| Commit message (Expand) | Author | Age | Files | Lines |
* | Only add dhcpv6 client allow rules if ipv6allow is set | Renato Botelho | 2014-02-18 | 1 | -1/+1 |
* | Move 'allow dhcpv6 client' rules above block bogonsv6 ones, it should fix #3395 | Renato Botelho | 2014-02-18 | 1 | -15/+18 |
* | Merge pull request #891 from PiBa-NL/captive_disable | Renato Botelho | 2014-02-18 | 1 | -0/+2 |
|\ |
|
| * | captive portal, don't generate rules for disabled portal | PiBa-NL | 2014-01-25 | 1 | -0/+2 |
* | | Move this global declaration to the proper file rather than backend code | Ermal | 2014-02-17 | 1 | -12/+0 |
* | | fix syntax | Renato Botelho | 2014-01-02 | 1 | -1/+1 |
* | | Generate a tracker id for the filter rules for now. Maybe for nat rules as well? | Ermal | 2013-12-31 | 1 | -2/+5 |
* | | Use _vip as identified for CARP vip IPs to allow easier upgrade code. This wa... | Ermal | 2013-12-06 | 1 | -1/+4 |
* | | Load only the options and nothing else | Ermal | 2013-12-06 | 1 | -1/+1 |
* | | Remove 0.0.0.0 from automatic outbound nat rules | Renato Botelho | 2013-11-28 | 1 | -1/+1 |
* | | Remove references to _vip interface and provide proper configuration for carp... | Ermal | 2013-11-28 | 1 | -5/+1 |
* | | fix 0.0.0.0 subnet for automatic outbound NAT rules, fixes #2416 | Renato Botelho | 2013-11-26 | 1 | -1/+1 |
* | | Fix #3331. Set interface subnet as destination when VIP is in the same subnet... | Renato Botelho | 2013-11-21 | 1 | -1/+4 |
* | | FreeBSD 10 pf does not have a limit for table entries | Ermal | 2013-11-21 | 1 | -3/+0 |
* | | Add gettext() to recently added strings | Renato Botelho | 2013-11-18 | 1 | -9/+9 |
* | | Add an option to return outbound NAT automatic to nat hosts with description,... | Renato Botelho | 2013-11-18 | 1 | -11/+41 |
* | | Add subnet to 0.0.0.0 otherwise it's not added to table, ticket #2416 | Renato Botelho | 2013-11-18 | 1 | -1/+1 |
* | | Make sure automatic rules are created even if mode is not set, ticket #2416 | Renato Botelho | 2013-11-18 | 1 | -1/+3 |
* | | Split automatic to nat hosts fill into a function to be able to call it from ... | Renato Botelho | 2013-11-14 | 1 | -95/+132 |
* | | Remove unused variables and fix automatic nat to alias-address | Renato Botelho | 2013-11-14 | 1 | -5/+1 |
* | | Add hybrid and disabled outbound NAT, fixes #2416: | Renato Botelho | 2013-11-13 | 1 | -9/+14 |
* | | Merge pull request #850 from phil-davis/master | Renato Botelho | 2013-11-12 | 1 | -2/+5 |
|\ \ |
|
| * | | Handle comma-separated list of remote networks when making vpn_networks table | Phil Davis | 2013-11-09 | 1 | -2/+5 |
| |/ |
|
* | | Add an option to set no-sync on rules to keep states from being synced via pf... | Renato Botelho | 2013-11-12 | 1 | -1/+6 |
|/ |
|
* | Unset this variable used in the loop to avoid having wrong information | Ermal | 2013-11-07 | 1 | -0/+2 |
* | Do not forget the trace in the pf.conf that something went wrong during rules... | Ermal | 2013-11-07 | 1 | -1/+1 |
* | Make sure pf rule labels never have more than 63 chars. It should fix #3208 | Renato Botelho | 2013-10-23 | 1 | -25/+35 |
* | Fix #3268 - avoid pf table names conflict: | Renato Botelho | 2013-10-16 | 1 | -0/+12 |
* | use (self) instead of any for web lockout | Chris Buechler | 2013-10-04 | 1 | -1/+1 |
* | use (self) rather than any as the destination for the lockout rules | Chris Buechler | 2013-10-04 | 1 | -2/+2 |
* | outboundnat, disable checkbox | PiBa-NL | 2013-09-16 | 1 | -0/+2 |
* | Correct typo that prevents dhcp rules from properly being generated. | Ermal | 2013-09-10 | 1 | -1/+1 |
* | Do not include disabled OpenVPN in vpn_networks and negate_networks | Phil Davis | 2013-09-09 | 1 | -4/+6 |
* | Fix errant display of "0 table deleted" during filter reload on console. | jim-p | 2013-09-09 | 1 | -1/+1 |
* | Ticket #3181 do the state flushing only on down gateway detection rather than... | Ermal | 2013-09-05 | 1 | -11/+5 |
* | Make the operation of saving old rule nearby the writing operation to be logi... | Ermal | 2013-09-04 | 1 | -4/+4 |
* | Sprinkle some unsets to reduce footprint and correct some whitespaces | Ermal | 2013-09-04 | 1 | -19/+17 |
* | filter_generate_port error log function name | Phil Davis | 2013-09-03 | 1 | -1/+1 |
* | Fixes #3173 if any port information exists on the rule than put it on the NEG... | Ermal | 2013-09-03 | 1 | -27/+36 |
* | touch up text, s/nat/NAT/ | Chris Buechler | 2013-09-03 | 1 | -2/+2 |
* | Fix selection of IPv6 target IP for IPv6 Outbound NAT rules. | Chris Buechler | 2013-08-17 | 1 | -0/+6 |
* | Unbreak limitrules and probably pfblocker errors. Spotted-by: Jim | Ermal | 2013-08-15 | 1 | -3/+2 |
* | Try to do the loading operations as close as possible to avoid any issues com... | Ermal | 2013-08-06 | 1 | -4/+4 |
* | fix text - s/occured/occurred/ | Chris Buechler | 2013-08-01 | 1 | -1/+1 |
* | the state type is required/valid for all specifications of protocol, not | Chris Buechler | 2013-08-01 | 1 | -1/+1 |
* | Fix up filter_pflog_start - optimize some code, and fix $retval so that it wi... | jim-p | 2013-07-30 | 1 | -2/+5 |
* | Show the name of the unresolvable alias name as well as the rule description ... | jim-p | 2013-07-30 | 1 | -4/+6 |
* | Optimization has nothing to do with limits | Ermal | 2013-07-25 | 1 | -1/+1 |
* | Fix #3106, parse 'not' rules right on destination for port forward + reflecti... | Renato Botelho | 2013-07-25 | 1 | -4/+5 |
* | Allow advanced options state-related parameters to be used for TCP, UDP and ICMP | Phil Davis | 2013-07-24 | 1 | -16/+22 |