summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2002-12-07Support parameters in anchor rules. Allows conditional evaluation, like:Daniel Hartmeier
anchor spews inet proto tcp from any to any port smtp ok deraadt
2002-12-07Backout unrelated changes in last commitTodd C. Miller
2002-12-07Kill '-a otp' flag. Our login(5) doesn't support this option and on OpenBSDTodd C. Miller
you should use login.conf(5) for this kind of thing. Closes PR 2967.
2002-12-07repair BNF to show that filter-opts can now be flexibly ordered aTheo de Raadt
pass/block line
2002-12-07Repair -a flag parsing which I broke in revision 1.47.Todd C. Miller
2002-12-07Only use "ASPICFLAG=-k" a.out assembler, not binutils.Todd C. Miller
With the binutils as, -k is expanded to -keep-locals which is not what we want. OK fgsch@
2002-12-07more KNFHenning Brauer
2002-12-07KNFHenning Brauer
2002-12-07now that we use the MTU from the interface instead of assuming 1500 theHenning Brauer
tbrsize and the minimum useful bandwidth are different on lo0/lo1. cope with that.
2002-12-07TAILQ_INSERT_TAIL instead of TAILQ_INSERT_HEAD. Makes addresses printRyan Thomas McBride
out in correct order when getting rules from kernel (affects pfctl -s). ok henning@
2002-12-07Treat EPIPE writing to the terminal the same as SIGQUIT from the user.Todd C. Miller
Closes PR 3016.
2002-12-07shadow cleanupHenning Brauer
ok mcbride@ frantzen@
2002-12-07Use `hostname` not `hostname -s` in subject for consistency withTodd C. Miller
daily, weekly, and monthly. Closes PR 3017.
2002-12-07kill an unused param to lungetcHenning Brauer
2002-12-07Add test for fix in revision 1.5 of getopt_long.cTodd C. Miller
2002-12-07KNFHenning Brauer
2002-12-07Fix pasto in last commit.Todd C. Miller
2002-12-07For getopt_long_only() we *do* want to match single-character optionsTodd C. Miller
as shortcuts for long ones, but only if this would not conflict with a short option in optstring. Now binutils gas works.
2002-12-07get the interface's MTU instead of assuming 1500Henning Brauer
2002-12-07match regression test with changes to internal byte order of string basedRyan Thomas McBride
source-hash keys ok dhartmei@ henning@
2002-12-07Convert the hash of a string key to network byte order. Makes regressionRyan Thomas McBride
work on all platforms. Bug found by dhartmei@ ok dhartmei@ henning@
2002-12-07typo, henning okAnil Madhavapeddy
2002-12-07document ALL the args to TAILQ_FOREACH_REVERSEMarco S Hyman
2002-12-06Don't use the RNG oscillator output directly, use the sha1'd version (theJason Wright
the direct data does not pass 1/2 of the FIPS140-2 tests with any degree of regularity).
2002-12-06Replace things like srandom(time(NULL)) with srandomdev(3). random(3)Todd C. Miller
good enough for games but we should at least use a decent seed. pjanzen@ OK
2002-12-06Set transform from default. PR#3008Hakan Olsson
2002-12-06it's -> its where appropriateAnil Madhavapeddy
2002-12-06In srandomdev(), if we can't access /dev/arandom, use the sysctl() instead.Todd C. Miller
We don't want to use the sysctl() by default since we are reading more than just a few bytes of entropy when setting up the state.
2002-12-06fix linebreak in example; ok ho@, jason@Markus Friedl
2002-12-06styleHenning Brauer
2002-12-06Fix two compatibility issues with our getopt_long_only() vs. the GNU version:Todd C. Miller
o Check for long options even when not at the beginning of an option. For instance, if -a is a short option w/o an arg and -static is a boolean long option then -astatic is valid for getopt_long_only(). o If a potential long argument does not match longopts and the first character is not a short option, print a warning and skip the rest of the argument. Also clean up some trailing whitespace and change return value of parse_long_options() from -2 to -1 when unmatched and in long_only mode. With these fixes the binutils ld seems happy with our getopt_long_only()
2002-12-06Replace license with something that's actually free.Nathan Binkert
Approved by original author. Julian.Onions@nexor.co.uk
2002-12-06Direction (in/out) is now optional in filter rules, 'block all' is valid,Daniel Hartmeier
for instance. Add a regress test for those.
2002-12-06Remove negated address list check again, doesn't work right yet.Daniel Hartmeier
2002-12-06block -> block dropHenning Brauer
2002-12-06let pfctl -v print out "block drop" instead of just "block" in the dropHenning Brauer
case. fixes the last self-regress test. ok markus@
2002-12-06Section and tag comparisions should be case-insensitive. PR#3010, Mike Neuman.Hakan Olsson
2002-12-06Fix cut'n'paste error, spotted by matthias.riese@b-novative.de; ok deraadt@Damien Miller
2002-12-06add IEEE Std 1003.1-2001. OK deraadt@Marco S Hyman
2002-12-06Describe the known standards for the St macro.Marco S Hyman
OK deraadt@
2002-12-06unkown; torh@bogus.netTheo de Raadt
2002-12-06Introduce anchors and named rule sets, allowing to load additional ruleDaniel Hartmeier
sets with pfctl and evaluate them from the main rule set using a new type of rule (which will support conditional evaluation soon). Makes maintenance of sub-rulesets simpler for pfctl and daemons. Idea and ok deraadt@
2002-12-05typo in error message; Tor HoughtonHenning Brauer
2002-12-05Treat RNGSHA1 operations the same as RNGBYPASS for callback purposes (theyJason Wright
produce the same size/format data).
2002-12-05Hmm.. I don't think we want the default to be to debug every allocation.Artur Grabowski
2002-12-05update test resultsTodd C. Miller
2002-12-05excercise "-W longopt"Todd C. Miller
2002-12-05Correctly handle -Wlong_arg (no space between -W and long_arg) when "W;"Todd C. Miller
is in optstring.
2002-12-05Do not use debug_malloc if it hasn't been initialized.Artur Grabowski
This can happen when debug_malloc_init calls pool_init which calls malloc (because the kernel is built with POOL_DIAGNOSTIC) which in turn calls debug_malloc and debug_malloc just happens to trigger on all memory allocations. This allows us to run a kernel debugging _all_ allocations.
2002-12-05Reorganize this so that getopt_only_only() works correctly.Todd C. Miller
In order for getopt_only_only() to work we need to check for long options before short ones. I have merged getopt_internal and getopt_long_internal into a single function with the actual long args parsing broken out into a separate function. This also simplifies the flow of control.
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-15 07:58:23 +0000