Age | Commit message (Collapse) | Author | |
---|---|---|---|
2003-12-15 | Add initial support for pf state synchronization over the network. | Ryan Thomas McBride | |
Implemented as an in-kernel multicast IP protocol. Turn it on like this: # ifconfig pfsync0 up syncif fxp0 There is not yet any authentication on this protocol, so the syncif must be on a trusted network. ie, a crossover cable between the two firewalls. NOTABLE CHANGES: - A new index based on a unique (creatorid, stateid) tuple has been added to the state tree. - Updates now appear on the pfsync(4) interface; multiple updates may be compressed into a single update. - Applications which use bpf on pfsync(4) will need modification; packets on pfsync no longer contains regular pf_state structs, but pfsync_state structs which contain no pointers. Much more to come. ok deraadt@ | |||
2003-12-15 | sync | Theo de Raadt | |
2003-12-15 | Regression test for PR 2450. | Otto Moerbeek | |
2003-12-15 | Unbreak parameter assignment when calling bourne style functions; | Otto Moerbeek | |
resolves PR 2450. ok deraadt@ millert@ | |||
2003-12-15 | - end sentence with full stop, not comma | Jason McIntyre | |
- kill whitespace at EOL | |||
2003-12-15 | - kill whitespace at EOL | Jason McIntyre | |
- new sentence, new line - kill blank line - missing .El - missing escape - ip -> IP - greate -> create | |||
2003-12-15 | sync | Theo de Raadt | |
2003-12-15 | shorten names a lot | Theo de Raadt | |
2003-12-15 | Add support to track stateful connections by source ip. This allows us | Ryan Thomas McBride | |
to: - Ensure that clients get a consistent IP mapping with load-balanced translation/routing rules - Limit the number of simultaneous connections a client can make - Limit the number of clients which can connect through a rule ok dhartmei@ deraadt@ | |||
2003-12-15 | shorter function names | Vincent Labrecque | |
2003-12-14 | the extended long (bracketed) cpu names are not useful to anyone -- they are | Theo de Raadt | |
just trivia -- and they bloat the ramdisk kernels by a fair bit. remove them. | |||
2003-12-14 | Replace pmap_testbit/pmap_changebit sequences with a tailor-made pmap_unsetbit | Miod Vallat | |
routine, in order to speed up pmap_clear_modify() and pmap_clear_reference(). | |||
2003-12-14 | Remove unnecessary trunc_page() calls, and change pmap_enter() logic to | Miod Vallat | |
match m68k. | |||
2003-12-14 | similar changes to the rest of the radio pages: | Jason McIntyre | |
- kill comma splices - escape dashes - s/tunning/tuning - some wording improvement | |||
2003-12-14 | capability is RADIO_CARD_TYPE, not RADIO_CAPS_CARD_TYPE; | Jason McIntyre | |
make the order more closely match the header; escape some dashes; | |||
2003-12-14 | typo from Brian Chase, plus kill a comma splice; | Jason McIntyre | |
2003-12-14 | In pmap_testbit, always update the attribute flags for the pv list hander. | Miod Vallat | |
Fixes a regression introduced in the conversion from physseg to VM_PAGE_MD. | |||
2003-12-14 | install awk USD; | Jason McIntyre | |
i have replaced the out of date refer(1) stuff with man page references, and updated the doc slightly to sync with current awk; ok mickey@ | |||
2003-12-14 | Log the actual port for src and dst, don't assume it's always 500. | Hakan Olsson | |
2003-12-14 | Make isakmpd work on big endian linux machines. From Sebastian Klemke. | Hakan Olsson | |
Also, a few style nits and a better error message text. | |||
2003-12-14 | we don't support GSS KEX; from Simon Wilkinson | Markus Friedl | |
2003-12-14 | alignment fixes (e.g sparc 64); from Daniel Lucq; ok millert, henning | Markus Friedl | |
2003-12-14 | Don't go into kerberosV/lib explicitely for now. Nothing to do there. | Matthieu Herrb | |
Ok deraadt@, miod@. | |||
2003-12-13 | sort options, and adjust -width of options' list; | Jason McIntyre | |
2003-12-13 | sort options and typos for openssl {dsa,dsaparam}; | Jason McIntyre | |
2003-12-13 | initial support ifconfig destroy; ok deraadt@ | Markus Friedl | |
2003-12-12 | sync | Theo de Raadt | |
2003-12-12 | 7954 will be a speed-bin 7955 | Theo de Raadt | |
2003-12-12 | another small compiler warning cleanup (#error instead of bailing out) | Hans-Joerg Hoexer | |
ok henning@ | |||
2003-12-12 | typo; ok jmc@ | Christian Weisgerber | |
2003-12-12 | Provide a better delay() resolution on 188. | Miod Vallat | |
2003-12-12 | Move PF interface code to new net/pf_if.c | Cedric Berger | |
Expect improvements in this area soon. ok dhartmei@ mcbride@ | |||
2003-12-12 | - update SYNOPSIS | Jason McIntyre | |
- standard options list - document -V and -d[n] - -mr and -mf no longer supported - some formatting issues - descriptions of examples before examples and indent examples - update SEE ALSO ok millert@ | |||
2003-12-12 | knf | Theo de Raadt | |
2003-12-12 | typo | Theo de Raadt | |
2003-12-12 | Document RLIM_SAVED_CUR and RLIM_SAVED_MAX; jmc@ OK | Todd C. Miller | |
2003-12-12 | Add a check for absolute pathnames; from cvs 1.11.10; deraadt@ OK | Todd C. Miller | |
2003-12-12 | Support for 2 new acard ata133 chips. | Alexander Yurchenko | |
2003-12-12 | nforce chip doesn't have cable check bit; noticed by hugh@ a long | Alexander Yurchenko | |
time ago. | |||
2003-12-12 | small compiler warning cleanup (#error instead of bailing out) | Hans-Joerg Hoexer | |
ok henning@ grange@ | |||
2003-12-12 | initialze -> initializes; from Eric Borsboom; | Jason McIntyre | |
2003-12-12 | Update, mostly from FreeBSD: | Otto Moerbeek | |
o Realloc cleanup. o Some long vs int cleanup. o Implement the Posix defined 0 as -o field value, meaning the join field. o Allow both -a 1 and -a1, and warn if the backward compatibility "-a without a number" is used. ok millert@ deraadt@ | |||
2003-12-12 | sync with <sys/mbuf.h>, as pointed out by Dragos Ruiu; | Jason McIntyre | |
ok deraadt@ itojun@ | |||
2003-12-12 | missing parameter to printf; erick@bonzai.space-ei.nl | Theo de Raadt | |
2003-12-12 | niels kindly dropped clause 3/4 from the license. tnx! | Jun-ichiro itojun Hagino | |
2003-12-12 | term 3 cleanup, ok from brezak | Theo de Raadt | |
2003-12-12 | we can skip arc4random() call here. markus | Jun-ichiro itojun Hagino | |
2003-12-12 | previous commit included bad hunk. sorry | Jun-ichiro itojun Hagino | |
2003-12-12 | Remove unused and incorrect generic interface ioctl defines SIOCSIFGENERIC | Ryan Thomas McBride | |
and SIOCGIFGENERIC. ok mickey@ | |||
2003-12-12 | reomve some junk | Theo de Raadt | |