summaryrefslogtreecommitdiff
path: root/usr.sbin/npf/npfctl/npf_build.c
AgeCommit message (Expand)Author
2020-05-30Major NPF improvements (merge from upstream):rmind
2020-05-23Backport selected NPF fixes from the upstream (to be pulled up):rmind
2019-09-30libnpf/npfctl: support dynamic NAT rulesets using a name prefix.rmind
2019-09-29npfctl: implement table replace subcommand.rmind
2019-08-08NPF: fix BPF byte-code generation for a port-range used in a group.rmind
2019-07-25npfctl: fix the bpf.jit parameter handling.rmind
2019-07-23NPF improvements:rmind
2019-04-17Summary: Ensure default TCP flags are applied to rules like 'pass stateful all'tih
2019-01-19Major NPF improvements:rmind
2018-09-29NPF: Major rework -- migrate NPF to the libnv library.rmind
2017-12-10npfctl: add support for the 'no-ports' flag in the 'map' statements.rmind
2017-01-19npfctl:rmind
2017-01-03npfctl: dynamic interface address handling; update npf.conf(8).rmind
2016-12-27npf.conf: add support for logical NOT, e.g.: pass from ! 10.0.0.1 to anyrmind
2016-12-26Sync NPF with the version on github: backport standalone NPF changes,christos
2015-06-08- npfctl: fix the confusion in the parser (0/0 case with no other filter).rmind
2015-03-21npfctl:rmind
2014-05-31npfctl_build_code: generate TCP/UDP check for ports case when other blocksrmind
2014-05-15NPF: imply SYN-only check for the stateful rules by default (when inspectingrmind
2014-02-13NPF: add support for IPv6-to-IPv6 Network Prefix Translation (NPTv6),rmind
2014-02-07NPF: add support for static (stateless) NAT.rmind
2014-02-06fix vax build.christos
2014-02-06Add support for CDB based NPF tables.rmind
2014-02-03- npfctl: fix table IDs (breakage since the table naming was added).rmind
2013-11-22Add npf_tableset_syncdict() to sync the table IDs in the proplib dictionary,rmind
2013-11-19Simplify parsing of npf.conf elements, create the npfvar_t when a value isrmind
2013-11-12NPF: add support for table naming and remove NPF_TABLE_SLOTS (there isrmind
2013-11-08NPF: add support for specifying the interfaces before they are attached.rmind
2013-09-20- NPF: change the group/ruleset syntax - simplify. Update npf.conf(5) manual.rmind
2013-09-19npfctl: remove some n-code leftovers, fix the build, update the man pages.rmind
2013-09-19- Convert NPF to use BPF byte-code by default. Compile BPF byte-code inrmind
2013-05-19- Add NPF table flushing functionality.rmind
2013-03-20Make ALG's autoloadable by providing in the config file:christos
2013-03-18- Extend npf.conf syntax to support dynamic NAT policies.rmind
2013-02-16- Convert NPF dynamic rule ID to just incremented 64-bit counter.rmind
2013-02-11Allow filtering on IP addresses even if the L4 protocol is unknown.rmind
2013-02-10- Fix NPF config reload with dynamic rules present.rmind
2013-02-09NPF:rmind
2012-12-23- Add NPF version check in proplist as well, not only ioctl. Bump the version.rmind
2012-12-10npfctl: add 'validate' command to check the config, but not load it. Updatermind
2012-11-26npfctl: extend syntax for extracting interface IP address(es) by the family.rmind
2012-09-16Implement dynamic NPF extensions interface. An extension consists ofrmind
2012-08-12- Extend npftest: add ruleset inspection testing from the config generatedrmind
2012-07-19teach npf ipv6-icmpspz
2012-07-15- Rework NPF tables and fix support for IPv6. Implement tree table typermind
2012-07-01NPF improvements:rmind
2012-06-16remove error(1) outputchristos
2012-06-16make this compile again.christos
2012-06-15- Rework NPF NAT syntax to be more structured and support future additionsrmind
2012-02-26- make each element of a variable hold a typechristos