summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2003-01-15what a bogus messageTheo de Raadt
2003-01-15missing ","Markus Friedl
2003-01-15Typo in yyerror().Mike Pechkin
henning@
2003-01-15Repair table "load" command.Cedric Berger
2003-01-14consistent output and typo, grange@ okAnil Madhavapeddy
2003-01-14unified IP parser:Henning Brauer
-move host(), set_ipmask and the ifa_* functions to pfctl_parser.[c|h] -extend host() to handle /mask itself, plus minor adjustments -use that in pfctl_table.c instead of coding the same shit again discussed w/ cedric@ ok cedric@ dhartmei@
2003-01-14A bit of consistency in error messages. Before regress commit :)Cedric Berger
2003-01-13err() on all memory allocation failuresCamiel Dobbelaar
ok henning dhartmei
2003-01-11Whitespace KNFRyan Thomas McBride
2003-01-11use errx instead of handcrufting the same with fprintf and exitHenning Brauer
2003-01-11-use inet_net_pton to parse IPv4 addresses, gains us support for CIDR (10/8)Henning Brauer
-remove a redundant strlen check ok cedric@
2003-01-11whitespace KNF _AGAIN_Henning Brauer
2003-01-11typoChristian Weisgerber
2003-01-10Fix adding and deleting addresses in a table when there is a conflict withCedric Berger
the "negated" attribute of an address. The previous behaviour was incorrect in both cases (too strict for the add command and too permissive for the delete command). ok dhartmei@
2003-01-10Be a bit more strict when parsing options.Cedric Berger
Disallow "pfctl -s rabbits" and friends. ok dhartmei@
2003-01-10More details about the -T flag. Suggested by Rukh <openbsd@rukh.net>Cedric Berger
2003-01-10no return after err(3), errx -> err after calloc failureHenning Brauer
andrushock at korovino.net via dhartmei@
2003-01-10print queue length for PRIQ, works nowHenning Brauer
2003-01-10fix thinkoHenning Brauer
2003-01-09no need for explicit numbering in enumsHenning Brauer
ok dhartmei@
2003-01-09knfDaniel Hartmeier
2003-01-09strlcpy return checks.Daniel Hartmeier
2003-01-09Check return values on the remaining strlcpy/strlcat. ok henning@Daniel Hartmeier
2003-01-09use a verbose flag in pfctl_show_altq instead of carrying around opts fromHenning Brauer
pfctl.c, and get rid of the #include "pfctl_parser.h"
2003-01-09zap unneeded #include <errno.h> as seen by both of us while discussingHenning Brauer
#include stuff with dhartmei@
2003-01-09support PRIQ in queue statisticsHenning Brauer
2003-01-09minor KNFHenning Brauer
2003-01-09note about queue statsHenning Brauer
2003-01-09first attack at pfctl queue statistics, to be displayed with pfctl -vsqHenning Brauer
This commit is dedicated to the cute KLM girls who made part of this possible with giving me a seat in the plane where you actually have enough place to hack. Thanks, girls. ok markus@ dhartmei@
2003-01-09Document the various "default" settings. Some style and alphabeticalHakan Olsson
reordering.
2003-01-09Default-Phase-1-Configuration --> Default-phase-1-configurationHakan Olsson
2003-01-09Change "Default-Phase-2-Suites" --> "Default-phase-2-suites"Hakan Olsson
2003-01-09Proper id_string for SET/ACK responder, plus attr payload fixes.Hakan Olsson
2003-01-09Add support for active/inactive tablesets in the kernel.Cedric Berger
Add table definition/initialisation construct in pfctl parser. Add and fix documentation for pf.4 and pf.conf.5. Tested on i386 and sparc64 by myself, macppc by Daniel. ok dhartmei@
2003-01-09Don't write past the end of the address buffer. Found by Theo.Hakan Olsson
2003-01-09Add some #ifdef USE_ISAKMP_CFG, no need to compile in code that willHakan Olsson
never be used.
2003-01-09Enable SET/ACK (ike-mode-cfg) when acting as responder. From TomasHakan Olsson
Walpuski.
2003-01-08check more strlcpy; camield@Theo de Raadt
2003-01-07Allow underscore at the beginning of strings, fixesDaniel Hartmeier
pass all user _spamd which was refused as syntax error before. Reported by Joe Nall. ok henning@
2003-01-07the "default" alias for "normal" optimization in pf_hints is dead for someHenning Brauer
time now... catched by david krause
2003-01-07Remove table name hashing (pass the name in each ioctl instead), andDaniel Hartmeier
introduce reference counting for tables, they are now automatically created and deleted through referencing rules. Diff partly from cedric@. ok mcbride@, henning@, cedric@
2003-01-06Fix some oversights with address pools for route-to/dup-to/reply-toRyan Thomas McBride
- copy key for src-hash - copy pool type (pools were being set to round-robin in all cases) + some minor knf. ok dhartmei@
2003-01-06typo: s/initalize/initializeChad Loder
2003-01-05spellingTheo de Raadt
2003-01-05don't whine about missing altq support in the kernel in the -q caseHenning Brauer
ok dhartmei@
2003-01-05err after calloc failure, not errxHenning Brauer
2003-01-05Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for tableDaniel Hartmeier
name. ok henning@, mcbride@, cedric@
2003-01-05err()/errx() do not return, errx() -> err() after calloc(), it sets errno.Daniel Hartmeier
From Andrey Matveev.
2003-01-04minor styleHenning Brauer
2003-01-04spellingTheo de Raadt