Age | Commit message (Collapse) | Author | |
---|---|---|---|
2003-05-24 | tweak; | Jason McIntyre | |
ok cedric@ | |||
2003-05-24 | sync | Cedric Berger | |
2003-05-05 | Describe format of pfctl -sl output, reported by Alejandro G. Belluscio. | Daniel Hartmeier | |
2003-05-03 | these files all had >9 arguments to .Nd, causing the name description to be | Jason McIntyre | |
truncated. i wrapped them in double quotes to preserve the line. grep inspired by an -mdoc lesson from millert@ | |||
2003-04-03 | Table stats are reliable now. | Cedric Berger | |
2003-03-11 | sprinkle some .Li | David Krause | |
ok deraadt@ | |||
2003-03-11 | fix spacing in sample output | David Krause | |
ok cedric@ | |||
2003-03-10 | whitespace | Henning Brauer | |
2003-03-10 | based on ideas from david, fix the Cm problems, and others | Theo de Raadt | |
2003-03-07 | Only show non-active tables when the -g flag is given. | Cedric Berger | |
ok dhartmei@ henning@ | |||
2003-03-07 | document -g | Henning Brauer | |
ok jmc@ | |||
2003-03-06 | tweak wording and mdoc formatting | David Krause | |
ok jmc@ henning@ | |||
2003-03-04 | wrap Ic in Xo/Xc until fixed | Theo de Raadt | |
2003-02-24 | echo->printf, because echo does not accept "\n" in all shells. | Cedric Berger | |
ok henning@ | |||
2003-02-20 | extra plurals; openbsd@davidkrause.com | Theo de Raadt | |
2003-02-20 | Fix table syntax documentation, from David Krause. | Cedric Berger | |
2003-02-19 | cmdline options in alphabetical order in usage() and manpage; and sync them | Henning Brauer | |
from krause | |||
2003-02-19 | clarify how pfctl -k works a bit; based on a discussion with daniel and sam | Henning Brauer | |
smith. ok dhartmei@ | |||
2003-02-14 | remove explicit table creation ( -T create ), it's useless. | Henning Brauer | |
ok pb@ mcbride@ deraadt@ | |||
2003-02-14 | English and mdoc fixes thanks to jmc@ | Cedric Berger | |
2003-02-14 | tweak | Henning Brauer | |
2003-02-14 | Document verbose mode with tables (statistics). | Cedric Berger | |
2003-02-14 | more good tweaks by krause | Henning Brauer | |
2003-02-13 | when talking about the order requirement, mention all 7 sections we have now. | Henning Brauer | |
from krause with minor tweaks by me grammar ok jmc@ | |||
2003-02-11 | document pfctl -D macro=value | Henning Brauer | |
2003-02-08 | Add an example of "pfctl -a anchor -s rules" usage, and make it clear | Daniel Hartmeier | |
that -a -s is needed for this, not -sa. | |||
2003-01-28 | typos; added white boldface to examples | Jason McIntyre | |
ok deraadt@ | |||
2003-01-25 | tables are just tables; implementation details (radix) don't need to be | Henning Brauer | |
mentioned. accidently already slipped in w/ my last commit; this one is forced. ok theo | |||
2003-01-25 | kill whitespace at EOL | Henning Brauer | |
2003-01-24 | document pfctl -vvsq | Henning Brauer | |
2003-01-22 | Automatically create tables for the "add" and "replace" table commands. | Cedric Berger | |
Requested by deraadt@, pass all regress tests. | |||
2003-01-19 | The -s option to show anchors is 'A' or 'Anchors', not 'a' (which is used | Daniel Hartmeier | |
to show 'all' information). | |||
2003-01-10 | Fix adding and deleting addresses in a table when there is a conflict with | Cedric Berger | |
the "negated" attribute of an address. The previous behaviour was incorrect in both cases (too strict for the add command and too permissive for the delete command). ok dhartmei@ | |||
2003-01-10 | More details about the -T flag. Suggested by Rukh <openbsd@rukh.net> | Cedric Berger | |
2003-01-09 | note about queue stats | Henning Brauer | |
2003-01-09 | Add support for active/inactive tablesets in the kernel. | Cedric Berger | |
Add table definition/initialisation construct in pfctl parser. Add and fix documentation for pf.4 and pf.conf.5. Tested on i386 and sparc64 by myself, macppc by Daniel. ok dhartmei@ | |||
2003-01-03 | Bring in userland code for accessing PF radix tables. | Cedric Berger | |
ok dhartmei@ mcbride@ | |||
2002-12-15 | There is no such thing as pf=YES variable, there is a variable | margarida | |
named pf which you can assign YES. Mention net.inet6.ip6.forwarding. inspired by nick@ and ok'd by henning@ | |||
2002-12-15 | rule set(s) -> ruleset(s) | margarida | |
henning@ ok | |||
2002-12-06 | Introduce anchors and named rule sets, allowing to load additional rule | Daniel Hartmeier | |
sets with pfctl and evaluate them from the main rule set using a new type of rule (which will support conditional evaluation soon). Makes maintenance of sub-rulesets simpler for pfctl and daemons. Idea and ok deraadt@ | |||
2002-12-04 | do not warn for unused variables except with -v -v; henning ok | Theo de Raadt | |
2002-11-24 | missed one about ordering in the ruleset-file | Philipp Buehler | |
2002-11-24 | modifiers for -F/-s in the same order as it is required in pf.conf(5) | Philipp Buehler | |
2002-11-20 | document the relevant queue options | Philipp Buehler | |
henning@ ok | |||
2002-11-09 | SEE ALSO reordering and corrections. | Federico G. Schwindt | |
2002-09-18 | fix Xr refs; frisco@blackant.net | Theo de Raadt | |
2002-06-27 | fix synopsis, closes pr2775 | Henning Brauer | |
ok pb@ | |||
2002-06-25 | move pfctl options -t, -m, -O and -l to pf.conf. These are set using the | Henning Brauer | |
"set" keyword. example rulefile: set optimization aggressive set timeout { tcp.closing 6, tcp.opening 6 } set limit { states 1000, frags 1000 } set loginterface wi0 pass out all keep state label "$nr:$srcaddr:$srcport:$dstaddr:$dstport" block in all fries@ is working on an updated pf.conf(5) discussed at c2k2 and on icb ok dhartmei@, kjell@ | |||
2002-06-11 | Add -N, -R | Kjell Wooding | |
2002-06-11 | sync with reality | Henning Brauer | |
ok dhartmei@ |