summaryrefslogtreecommitdiff
path: root/sbin/ipf
AgeCommit message (Collapse)Author
2001-01-30reimplement local ipf mods and import some missed patchesKjell Wooding
2001-01-20Print the service name instead of the number if available.Federico G. Schwindt
Similar to the problem found by millert@ (next thing to commit).
2001-01-17IPF 3.4.16 userland.Federico G. Schwindt
2001-01-171st part of ipf userland code.Federico G. Schwindt
2000-08-10Import ipf 3.3.18. Fixes more problems with the in-kernel FTP proxy,Kjell Wooding
some nat state bugs, and ups the default state table size. See sbin/ipf/HISTORY for details.
2000-05-24Update to ipf 3.3.16. among other things, this addresses a security issueKjell Wooding
with certain rule configurations: * don't add TCP state if it is an RST packet and (attempt) to send out RST/ICMP packets in a manner that bypasses IP Filter.
2000-05-01Update to ipfilter 3.3.13. This should be the last of the 3.3.x releases.Kjell Wooding
This patch fixes mostly ICMP timeout problems, as the ftp proxy changes were imported previously.
2000-04-26no, that is wrongTheo de Raadt
2000-04-26Missing links.Marc Espie
2000-04-13Long overdue documentation update for IPFilter. TheseKjell Wooding
are taken directly from the ipf distribution, and are not mandoc'ed. ipf(8), ipfstat(8), and ipnat(8) are yet to go and must be done manually. (sigh)
2000-04-12remove unnecessary kernel dependency - mep@netsec.netKjell Wooding
2000-04-12Trailing whitespace begone!Aaron Campbell
2000-04-05Update to ipf 3.3.12. Most fixes relate to hardening ofKjell Wooding
in-kernel ftp proxy. See sbin/ipf/HISTORY for details.
2000-03-18Remove hard sentence breaks, and some other cleanup along the way.Aaron Campbell
2000-03-16Convert to mdoc, but it's still a pretty ugly man page.Aaron Campbell
2000-03-14Suffix "i.e." and "e.g." with a comma. Just another really picky man pageAaron Campbell
commit, as we want our documentation to be as consistently formatted as possible (it's getting there :-)).
2000-03-13Import of Darren Reed's IPFilter 3.3.11. See sbin/ipf/HISTORY for detailedKjell Wooding
changelog. Documentation changes are now way behind. Volunteers?
2000-03-06Do not leave `(' characters dangling at the end of lines; instead, use theAaron Campbell
appropriate mdoc macros to handle these cases.
2000-03-05Finish standardizing options list introduction.Aaron Campbell
2000-02-19Re-order SEE ALSO entries.Aaron Campbell
2000-02-16Import IPFilter 3.3.9. Primarily, bugfixes since 3.3.8. See sbin/ipf/HISTORYKjell Wooding
for details.
2000-02-01Update to IPFilter 3.3.8. Man pages still to go. See sbin/ipf/HISTORYKjell Wooding
for details.
2000-01-24correct Xrs. marc@snafu.org.Kjell Wooding
2000-01-18Repair duplicate word occurences; (as found by a Perl script sent to us fromAaron Campbell
Tom Christiansen <tchrist@perl.com>).
2000-01-07Update documentation to reflect 3.3.6Kjell Wooding
2000-01-07Update documentation to reflect 3.3.6 changes.Kjell Wooding
1999-12-28ipf could dump core when fed unfinished rules. Inspired by pr/995.Kjell Wooding
1999-12-28Update to ipfilter 3.3.6. See src/sbin/ipf/HISTORY for details.Kjell Wooding
1999-12-28Darren Reed's ipfilter HISTORY file. This should satisfy the hordesKjell Wooding
who have been asking what features are included in the latest ipf import, while keeping the size of the commit messages down.
1999-12-17Update to Darren Reed's IPFilter 3.3.5Kjell Wooding
Fixes: realaudio proxy issues, "log level" printing, and source address for icmp replies (was reversed). Thoughtfully submitted by techs@obfuscation.org
1999-12-16Add the ability to use interface names in place of addressesKjell Wooding
in firewall rules. i.e. block return-rst in quick on fxp0 proto tcp from any to fxp0 port = 9999 This will make things like DHCP much easier to deal with in the future.
1999-12-15Import of Darren Reed's IPFilter 3.3.4, including OpenBSD patches.Kjell Wooding
Many, many enhancements and improvements, including new in-kernel proxies, enhancements to logging, and many bugfixes. Note: Man pages have not yet been re-converted to mdoc.
1999-12-14New ipfilter files. Preparing for merge of ipfilter 3.3.4.Kjell Wooding
1999-11-23fix typo; jwk@lords.comTheo de Raadt
1999-10-12correct ipfilter urlEric Jackson
1999-09-23Typo fixes.Alex Feldman
1999-09-09typo: inbould -> inbound; mason@netbsd.orgAaron Campbell
1999-07-09First cut at mdoc'ing this one. More cleanup and content changes coming ↵Kjell Wooding
after defcon.
1999-07-08whoops, forgot -E flag in an exampleAaron Campbell
1999-07-08There can be only one "HEAD" rule per group.Kjell Wooding
1999-07-08clarify what we mean by firewallAaron Campbell
1999-07-08complete SYNOPSIS and document -l optionAaron Campbell
1999-07-08complete rewrite; this man page is now usefulAaron Campbell
1999-07-06Whoops. Missed man page. removed -UKjell Wooding
1999-07-06Option -U is solaris only. Pointed out by theo.Kjell Wooding
1999-07-06gethostname() is safeTheo de Raadt
1999-07-05Big cleanup of the userland ipf parsing code.Kjell Wooding
inet_addr() was replaced with inet_aton. atoi() tests were replaced by range-checked strtol calls. Error checking of ipf.rules input should be vastly improved now.
1999-06-06use inet_aton() instead of inet_addr()Theo de Raadt
1999-06-04start to remove non-escaped trailing whitespace, it can confuse troff; pjanzen@Aaron Campbell
1999-05-28more .El madnessAaron Campbell
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-27 12:36:34 +0000