Age | Commit message (Collapse) | Author | |
---|---|---|---|
2003-03-27 | switch symset/symget to TAILQ instead of using hand baked lists | Henning Brauer | |
ok dhartmei@ cedric@ | |||
2003-03-24 | Add missing return. Fix following buglet: | Cedric Berger | |
# echo "pass in from <veryLONGtableNAME>" | pfctl -nvf- pass in from <veryLONGtableNAME>/0 to any | |||
2003-03-21 | document ceccerrs and cecclast for sparc64 | Jason Wright | |
2003-03-21 | document [initiator-id] section; richb@timestone.com.au; ok ho@, jmc@ | Markus Friedl | |
2003-03-19 | inet_net_pton acts weird when it comes to multicast addresses. so pass the | Henning Brauer | |
netmask given by the OP to host_v4(), and in case it wasn't specified, do not trust inet_net_pton telling is it is a /4 but use /32. otherwise, "pass in from 224.0.0.6" suddenly became "pass in from 224.0.0.0/4", which is clearly not the desired result. inet_net_pton behaviour under investigation, using the least intrusive fix for now. found after bug report From: Julien Bordet <zejames@greyhats.org> via dhartmei ok daniel cedric | |||
2003-03-19 | kill the address token and move the host() invocation up to the host token, | Henning Brauer | |
so that host() always gets the full address to be parsed including the netmask instead of applying the netmask afterwards. this could break some edge cases and was broken since the (interface)/24 fix. new token dynaddr for, well, dynaddr, and apply an eventually given netmask afterwards in the host token just in this case. found after bug report From: Julien Bordet <zejames@greyhats.org> via dhartmei ok daniel cedric | |||
2003-03-16 | secrity -> security. Ok ho@ | Matthieu Herrb | |
2003-03-16 | modifed -> modified | margarida | |
2003-03-16 | Use len+1 as the size parameter to strlcpy() since len does not include | Todd C. Miller | |
the trailing NUL. From krw@; deraadt@ OK | |||
2003-03-14 | Spelling fixes from david@. jmc@ ok. | Hakan Olsson | |
2003-03-14 | unkown -> unknown | margarida | |
ok millert@ | |||
2003-03-14 | tweak; millert ok | Theo de Raadt | |
2003-03-13 | Remove duplicate Amoeba entries. | Miod Vallat | |
2003-03-13 | clarify how mappings work. closes pr2138 | Ted Unangst | |
ok jmc@ | |||
2003-03-13 | 1 byte underflow; from tdeval | Theo de Raadt | |
2003-03-13 | Might as well do blinding here too. | Hakan Olsson | |
2003-03-13 | Avoid "j += snprintf()". niklas@ ok. | Hakan Olsson | |
2003-03-13 | lots of sprintf -> snprintf and strcpy -> strlcpy; checked by tedu | Theo de Raadt | |
2003-03-13 | zap two sprintf, more to go | Theo de Raadt | |
2003-03-13 | more strlcpy; most from Hans-Joerg.Hoexer@yerbouti.franken.de, a bit from me | Theo de Raadt | |
2003-03-13 | thought we had already deleted this | Theo de Raadt | |
2003-03-12 | more .Li | Theo de Raadt | |
2003-03-12 | document setting ipx frame type; from ianm@cit.uws.edu.au | Michael Shalayeff | |
2003-03-11 | do the queue ID assignment for cbq already in userland. ensure that queues | Henning Brauer | |
with different names always have different queue IDs, even if they live on different interfaces (that was the goal here). fixes regress pfaltq4 ok cedric@ dhartmei@ | |||
2003-03-11 | On pfctl -a foo -Fn/-Fr, traverse all subrulesets in the anchor and | Daniel Hartmeier | |
clear nat/rules, like -sn/-sr already does. Reported by Julien Bordet. ok henning@, cedric@ | |||
2003-03-11 | fix format strings in debugging output, qid is unsigned | Henning Brauer | |
ok cedric@ mcbride@ | |||
2003-03-11 | sprinkle some .Li | David Krause | |
ok deraadt@ | |||
2003-03-11 | fix spacing in sample output | David Krause | |
ok cedric@ | |||
2003-03-11 | files with dead .Xr's; | Jason McIntyre | |
left .Xr, but removed man page number as suggested by mpech@ more help and ok millert@ | |||
2003-03-11 | mdoc fixes: macros are not allowed inside .Bd -literal blocks | David Krause | |
ok deraadt@ | |||
2003-03-11 | spelling | David Krause | |
ok millert@ | |||
2003-03-11 | always compile and set pcap filters even when filters are not specified. | Kenjiro Cho | |
bpf implements snaplen by filters and captures full packets when filters are not set. ok deraadt@, dhartmei@ | |||
2003-03-11 | strcpy -> strlcpy; Hans-Joerg.Hoexer@yerbouti.franken.de | Theo de Raadt | |
2003-03-11 | mention that avgfilesize is in bytes. | Ted Unangst | |
2003-03-10 | filesystem -> file system for a little consistency | Ted Unangst | |
ok jmc@ millert@ | |||
2003-03-10 | document dirpref options -g and -h (w/ avgfpdir) | Ted Unangst | |
ok millert@ | |||
2003-03-10 | check for multiple same named queues on one interface. | Henning Brauer | |
before this was rejected at load time with a rather useless error message, now a nice error message points out the actual error. inspired by an error report from Damien Miller ok dhartmei@ pb@ (monsterdiff complete) | |||
2003-03-10 | correctly cope with errors returned by eval_pfqueue and pfctl_add_altq | Henning Brauer | |
ok dhartmei@ pb@ (as part of... you know, monsterdiff) | |||
2003-03-10 | rework error handling in eval_pfqueue(). | Henning Brauer | |
instead of using errx, print the error message and return. This is consistent with what we do everywhere in pfctl. ok dhartmei@ pb@ (as part of a monsterdiff) | |||
2003-03-10 | when complaining about a queue wiwthout parent, include the queue name in | Henning Brauer | |
the error message ok dhartmei@ pb@ (as part of a monsterdiff) | |||
2003-03-10 | it doesn't make sense to mimic pfctl -vsr output in pfctl -vsl (same for | Henning Brauer | |
-vvsr ./. -vvsl). this resulted in more or less garbage in pfctl -vsl and -vvsl output. so ignore the extra verbosity flags for -sl. found by pb@ ok pb@ dhartmei@ | |||
2003-03-10 | whitespace | Henning Brauer | |
2003-03-10 | based on ideas from david, fix the Cm problems, and others | Theo de Raadt | |
2003-03-10 | double word (be be) in comment | David Krause | |
ok drahn@ | |||
2003-03-09 | cope with LOOP_THROUGH modifying the lis (queues). | Henning Brauer | |
in case of an error in the queue def in question the queues list remains unmodified, but the LOOP_THROUGH caused a mod anyway, and the list can stay empty. subsequent checks for NULL which check for a empty list fail then. fix by adding an explicit check before looping. fixes regress pfail31 error report by Kamil Andrusz via pb@, testcase from pb@ ok dhartmei@ | |||
2003-03-09 | cope with the fact that LOOP_THROUGH loops once even if the list is empty by | Henning Brauer | |
moving the addition of child queues a bit down after the successfull addition of the current queue and an explicit NULL check before looping. fixes regress pf59 found by kjc@ ok kjc@ cedric@ dhartmei@ | |||
2003-03-09 | if fopen fails, do not bork; rob@animoid-row.org | Theo de Raadt | |
2003-03-08 | Remove unneeded #includes, from Andrey Matveev andrushock(at)pisem(dot)net | Daniel Hartmeier | |
2003-03-08 | fix the obvious: | Henning Brauer | |
since we do not modify the struct pf_altq *a any more but our private copy, we can of course not inherit teh scheduler type from it, since it did not inherit the scheduler type from the parent. so just inherit the scheduler type from the parent directly... ok dhartmei@ cedric@ | |||
2003-03-08 | in expand_queue, make a private copy of the struct pf_altq before modifying | Henning Brauer | |
it. modifying the original one had undesired side effects if a queue was expanded to more than one because it belonged to more than one interface ok pb@ cedric@ dhartmei@ |