master
Revert change that benno apparently commited by mistake and breaks build on gcc architectures. ok florian@
bump the type used to specify traffic queue bandwidth to 64bit.
Show the routing address selected by "route-to" in "pfctl -s states".
-z honours -a (reset rule stats per anchor); OK sashan henning deraadt
pfctl(8) should not attempt to read limits when open('/dev/pf') fails.
pfctl: clear statistic for specified addresses
This change allows user to define table inside the anchor like that: anchor foo { table <bar> { 192.168.1.1 } pass in from <bar> to <self> } Without this diff one must either create table <bar> in main ruleset (root) or use 'pfctl -a foo -t bar -T add 192.168.1.1' This glitch is hard to notice. Not many human admins try to attach tables to non-global anchors. Deamons which configure pf(4) automatically at run time such as relayd(8) and spamd(8) create tables attached to thair anchors (for example 'relayd/*') but the deamons use way similar to pfctl(8) to add and manage those tables.
Enable pfctl(8) to recursively flush rules and tables from PF driver. The recursive operation ("pfctl -a '*' ...") works for '-s' option already. This change enables the same thing for '-F' option, so "pfctl -a '*' -Fa" will flush everything from PF driver.
remove prototypes with no matching function