summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2003-01-19Quote label in rule output.Camiel Dobbelaar
ok henning dhartmei
2003-01-18minor tweaking; andrushock@korovino.netTheo de Raadt
2003-01-18Move freeaddrinfo() so it doesn't get called with an uninitializedDaniel Hartmeier
pointer (which segfaults). From Julien Bordet.
2003-01-18va_end() missing. Thanks to Andrey Matveev.Cedric Berger
2003-01-18quite some KNF for the older partsHenning Brauer
2003-01-18host() overhaul:Henning Brauer
-split off host_if, host_v4, host_v6, host_dns -kill the return-everywhere nightmare -bit better error messages makes the code more read-, understand- and maintainable; no fucntional changes. ok cedric@ dhartmei@ mcbride@
2003-01-18KNF after ryan...Henning Brauer
2003-01-18Cleanup PF_OPT_NOACTION with tables. No changes on current behaviour,Cedric Berger
but do something useful when the user has no access to /dev/pf. Tested on i386, sparc64. ok henning@
2003-01-18Little cleanup from Andrey Matveev <andrushock@korovino.net>Cedric Berger
Thanks!
2003-01-18Add missing token string and assignment to make static-port work for real.Ryan Thomas McBride
Diff and report courtesy of mpech@ and form@ ok dhartmei@
2003-01-17Add a new option, -f, that allows the user to specify a custom outputTodd C. Miller
format. Currently only supports printing the inode number and path (along with any arbitrary text) but other escapes may be added later. A useful invocation is: ncheck -s -f '\P\0' | xargs -0 ls -ldgT deraadt@ OK
2003-01-17Don't report setugid directories in "ncheck -s" output since thoseTodd C. Miller
bits have no meaning on OpenBSD. deraadt@ OK
2003-01-17KNFMarkus Friedl
2003-01-17bandwith -> bandwidthCamiel Dobbelaar
YYERROR on failed parseicmpspec() ok dhartmei mcbride henning
2003-01-15what a bogus messageTheo de Raadt
2003-01-15missing ","Markus Friedl
2003-01-15Typo in yyerror().Mike Pechkin
henning@
2003-01-15Repair table "load" command.Cedric Berger
2003-01-14consistent output and typo, grange@ okAnil Madhavapeddy
2003-01-14unified IP parser:Henning Brauer
-move host(), set_ipmask and the ifa_* functions to pfctl_parser.[c|h] -extend host() to handle /mask itself, plus minor adjustments -use that in pfctl_table.c instead of coding the same shit again discussed w/ cedric@ ok cedric@ dhartmei@
2003-01-14A bit of consistency in error messages. Before regress commit :)Cedric Berger
2003-01-13err() on all memory allocation failuresCamiel Dobbelaar
ok henning dhartmei
2003-01-11Whitespace KNFRyan Thomas McBride
2003-01-11use errx instead of handcrufting the same with fprintf and exitHenning Brauer
2003-01-11-use inet_net_pton to parse IPv4 addresses, gains us support for CIDR (10/8)Henning Brauer
-remove a redundant strlen check ok cedric@
2003-01-11whitespace KNF _AGAIN_Henning Brauer
2003-01-11typoChristian Weisgerber
2003-01-10Fix adding and deleting addresses in a table when there is a conflict withCedric Berger
the "negated" attribute of an address. The previous behaviour was incorrect in both cases (too strict for the add command and too permissive for the delete command). ok dhartmei@
2003-01-10Be a bit more strict when parsing options.Cedric Berger
Disallow "pfctl -s rabbits" and friends. ok dhartmei@
2003-01-10More details about the -T flag. Suggested by Rukh <openbsd@rukh.net>Cedric Berger
2003-01-10no return after err(3), errx -> err after calloc failureHenning Brauer
andrushock at korovino.net via dhartmei@
2003-01-10print queue length for PRIQ, works nowHenning Brauer
2003-01-10fix thinkoHenning Brauer
2003-01-09no need for explicit numbering in enumsHenning Brauer
ok dhartmei@
2003-01-09knfDaniel Hartmeier
2003-01-09strlcpy return checks.Daniel Hartmeier
2003-01-09Check return values on the remaining strlcpy/strlcat. ok henning@Daniel Hartmeier
2003-01-09use a verbose flag in pfctl_show_altq instead of carrying around opts fromHenning Brauer
pfctl.c, and get rid of the #include "pfctl_parser.h"
2003-01-09zap unneeded #include <errno.h> as seen by both of us while discussingHenning Brauer
#include stuff with dhartmei@
2003-01-09support PRIQ in queue statisticsHenning Brauer
2003-01-09minor KNFHenning Brauer
2003-01-09note about queue statsHenning Brauer
2003-01-09first attack at pfctl queue statistics, to be displayed with pfctl -vsqHenning Brauer
This commit is dedicated to the cute KLM girls who made part of this possible with giving me a seat in the plane where you actually have enough place to hack. Thanks, girls. ok markus@ dhartmei@
2003-01-09Document the various "default" settings. Some style and alphabeticalHakan Olsson
reordering.
2003-01-09Default-Phase-1-Configuration --> Default-phase-1-configurationHakan Olsson
2003-01-09Change "Default-Phase-2-Suites" --> "Default-phase-2-suites"Hakan Olsson
2003-01-09Proper id_string for SET/ACK responder, plus attr payload fixes.Hakan Olsson
2003-01-09Add support for active/inactive tablesets in the kernel.Cedric Berger
Add table definition/initialisation construct in pfctl parser. Add and fix documentation for pf.4 and pf.conf.5. Tested on i386 and sparc64 by myself, macppc by Daniel. ok dhartmei@
2003-01-09Don't write past the end of the address buffer. Found by Theo.Hakan Olsson
2003-01-09Add some #ifdef USE_ISAKMP_CFG, no need to compile in code that willHakan Olsson
never be used.