Age | Commit message (Collapse) | Author | |
---|---|---|---|
2009-04-26 | remove "set require-order no", it is now the default | Stuart Henderson | |
2009-04-20 | do NOT set defaults to their default here | Theo de Raadt | |
2009-04-06 | reassembly works different now | Henning Brauer | |
2009-02-23 | A newruleset that contains actual blocks people can use if they | Theo de Raadt | |
uncomment them. this is no longer a sample. everything in here now must be completely legit. discussed at length with henning, claudio, and sthen ok sthen | |||
2008-05-09 | now we also need the anchor "relayd/*" in addition to the rdr-anchor. | Reyk Floeter | |
ok pyr@ | |||
2008-04-02 | no more /usr/share/pf; pointed out by Rod Whitworth | Jason McIntyre | |
2008-02-29 | add configuration examples to the default pf.conf file (commented out): | Reyk Floeter | |
- rdr-anchor "relayd/*": the anchor used by relayd to load redirections into pf. - pass in on $ext_if proto icmp to ($ext_if): it is a bad habit to block icmp, this example proposes to allow it by default. ok henning@ | |||
2007-02-24 | Make greylisting the default when spamd is enabled. Uses the new -g flag | Todd C. Miller | |
for spamd-setup. OK beck@ | |||
2006-10-24 | kill extra spaces | David Krause | |
2006-10-07 | 'keep state' is now default, and use 'no state' where intended. | Ryan Thomas McBride | |
2006-01-30 | update for new ftp-proxy | Camiel Dobbelaar | |
ok henning@ | |||
2006-01-26 | set skip is no good idea on int_if in this sample rulseset that also | Henning Brauer | |
has a rdo on $int_if that stops working then. pt out by cedric | |||
2005-08-23 | replace the "pass quick" example line for loopback and the inner interface | Henning Brauer | |
with a set skip statement to the same effect, performs way better suggested by Stuart Henderson <stu@spacehopper.org>, theo ok | |||
2004-04-29 | reminder to set net.inet.ip.forwarding/net.inet6.ip6.forwarding in sysctl.conf | Mike Frantzen | |
ok cedric@ mcbride@ | |||
2004-03-02 | Simplify pf.conf, provide sample rules for greylisting. | Cedric Berger | |
ok beck@, input from many. | |||
2004-02-26 | add src.track timeout and src-nodes limit | David Krause | |
ok mcbride@ | |||
2004-01-29 | sync pf.conf example with spamd(8); ok deraadt@ | Todd T. Fries | |
2003-12-05 | put back lo1 | David Krause | |
requested by deraadt@ | |||
2003-12-05 | lo1 no longer exists by default so don't try to use it in examples | David Krause | |
ok henning@ | |||
2003-11-18 | add a commented out 'set debug' default | David Krause | |
ok henning@ | |||
2003-09-02 | add set fingerprints example | David Krause | |
ok deraadt@ henning@ frantzen@ | |||
2003-06-17 | add adaptive, interval, and frag timeouts to pf.conf and BNF | David Krause | |
ok henning@ dhartmei@ | |||
2003-03-24 | Add comments, mostly borrowed from ftp-proxy(8), showing how to set up up. | Ian Darwin | |
Improved & OK'd by dhartmei@, david@, millert@. | |||
2003-03-11 | remove extra # | David Krause | |
ok henning@ | |||
2003-02-28 | much-needed update to include examples for all seven types of statements | David Krause | |
queueing and table examples are from the fosdem2k3 presentation spamd rdr simplification from henning@ ok dhartmei@ henning@ | |||
2003-02-14 | spamd now uses tables (these load MUCH faster on my ss2); ok deraadt | Jason Wright | |
2002-12-30 | #set limit states unlimited -> 10000, as unlimited is not valid syntax. | Daniel Hartmeier | |
2002-12-23 | default optimization is "normal", not "default" | Henning Brauer | |
2002-12-23 | missing } | Henning Brauer | |
2002-12-23 | -list options with default values | Henning Brauer | |
-correct order -various spelling/grammar/consistency from David Krause with feedback from dhartmei@ | |||
2002-12-21 | sample spamd stuff | Theo de Raadt | |
2002-12-19 | indent so it is more clear, add spews thing | Theo de Raadt | |
2002-12-13 | kill whitespace at EOL; David Krause | Henning Brauer | |
2002-11-24 | make the example parseable (quotes around macros) | Philipp Buehler | |
from sam smith, thx henning@ ok | |||
2002-11-16 | Use macros in sample file, ok dhartmei@ | Ian Darwin | |
2002-06-27 | spell. | Federico G. Schwindt | |
2002-06-22 | add a commented out scrub example | Henning Brauer | |
ok frantzen@ | |||
2002-06-17 | merge nat.conf here as well | Henning Brauer | |
add more simple filter rule examples "commit it" deraadt@ | |||
2001-11-16 | The implicit pass rules come first, not last. Spotted by alec@dtkco.com. | Daniel Hartmeier | |
2001-06-26 | Point to pf.conf(5) and nat.conf(5) for help | smart | |
2001-06-26 | change default pf configuration files to pf.conf and nat.conf. ok theo | Kjell Wooding | |