Age | Commit message (Expand) | Author |
2009-06-10 | pf should block the port range allocated by net.inet.tcp.baddynamic | Igor Sobrado |
2009-05-30 | shorter, ok theo | Henning Brauer |
2009-05-30 | we want pass, not pass in, so we get state for all connections | Henning Brauer |
2009-04-26 | remove "set require-order no", it is now the default | Stuart Henderson |
2009-04-20 | do NOT set defaults to their default here | Theo de Raadt |
2009-04-06 | reassembly works different now | Henning Brauer |
2009-02-23 | A newruleset that contains actual blocks people can use if they | Theo de Raadt |
2008-05-09 | now we also need the anchor "relayd/*" in addition to the rdr-anchor. | Reyk Floeter |
2008-04-02 | no more /usr/share/pf; pointed out by Rod Whitworth | Jason McIntyre |
2008-02-29 | add configuration examples to the default pf.conf file (commented out): | Reyk Floeter |
2007-02-24 | Make greylisting the default when spamd is enabled. Uses the new -g flag | Todd C. Miller |
2006-10-24 | kill extra spaces | David Krause |
2006-10-07 | 'keep state' is now default, and use 'no state' where intended. | Ryan Thomas McBride |
2006-01-30 | update for new ftp-proxy | Camiel Dobbelaar |
2006-01-26 | set skip is no good idea on int_if in this sample rulseset that also | Henning Brauer |
2005-08-23 | replace the "pass quick" example line for loopback and the inner interface | Henning Brauer |
2004-04-29 | reminder to set net.inet.ip.forwarding/net.inet6.ip6.forwarding in sysctl.conf | Mike Frantzen |
2004-03-02 | Simplify pf.conf, provide sample rules for greylisting. | Cedric Berger |
2004-02-26 | add src.track timeout and src-nodes limit | David Krause |
2004-01-29 | sync pf.conf example with spamd(8); ok deraadt@ | Todd T. Fries |
2003-12-05 | put back lo1 | David Krause |
2003-12-05 | lo1 no longer exists by default so don't try to use it in examples | David Krause |
2003-11-18 | add a commented out 'set debug' default | David Krause |
2003-09-02 | add set fingerprints example | David Krause |
2003-06-17 | add adaptive, interval, and frag timeouts to pf.conf and BNF | David Krause |
2003-03-24 | Add comments, mostly borrowed from ftp-proxy(8), showing how to set up up. | Ian Darwin |
2003-03-11 | remove extra # | David Krause |
2003-02-28 | much-needed update to include examples for all seven types of statements | David Krause |
2003-02-14 | spamd now uses tables (these load MUCH faster on my ss2); ok deraadt | Jason Wright |
2002-12-30 | #set limit states unlimited -> 10000, as unlimited is not valid syntax. | Daniel Hartmeier |
2002-12-23 | default optimization is "normal", not "default" | Henning Brauer |
2002-12-23 | missing } | Henning Brauer |
2002-12-23 | -list options with default values | Henning Brauer |
2002-12-21 | sample spamd stuff | Theo de Raadt |
2002-12-19 | indent so it is more clear, add spews thing | Theo de Raadt |
2002-12-13 | kill whitespace at EOL; David Krause | Henning Brauer |
2002-11-24 | make the example parseable (quotes around macros) | Philipp Buehler |
2002-11-16 | Use macros in sample file, ok dhartmei@ | Ian Darwin |
2002-06-27 | spell. | Federico G. Schwindt |
2002-06-22 | add a commented out scrub example | Henning Brauer |
2002-06-17 | merge nat.conf here as well | Henning Brauer |
2001-11-16 | The implicit pass rules come first, not last. Spotted by alec@dtkco.com. | Daniel Hartmeier |
2001-06-26 | Point to pf.conf(5) and nat.conf(5) for help | smart |
2001-06-26 | change default pf configuration files to pf.conf and nat.conf. ok theo | Kjell Wooding |