summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2001-07-29-Wunused for KAME caseJun-ichiro itojun Hagino
2001-07-28start sentence on new line, from mpech@Daniel Hartmeier
2001-07-26edlabel no moreMiod Vallat
2001-07-26Remove edlabel. It was only compiled on sparc and sun3, and is completelyMiod Vallat
superceded by disklabel -E. millert@ agrees.
2001-07-26Remove BUGS section, swapoff now works. ok art@Peter Valchev
2001-07-26sort SEE ALSO section correctly, from mpech@.Daniel Hartmeier
2001-07-26usage() with __progname according to style(9), typo in man page. both from ↵Daniel Hartmeier
mpech@.
2001-07-25do not write into s6_addr[16] (out of bounds).Jun-ichiro itojun Hagino
2001-07-25pf_key_v2_flow: sync success and failure messages; ok niklas@Markus Friedl
2001-07-25CFG mode changes: send attributes of size 0 if attribute is not availableMarkus Friedl
fix several if statements, ok ho@
2001-07-25do not setup identity extensions for KAME; ok angelos@Markus Friedl
2001-07-25We have to undo the changes to the 3rd party code, because it makesMike Pechkin
upgrading those components hell. Tip of the day: Don't commit without confirmation.
2001-07-20we don't like:Mike Pechkin
o) .Pp before/after .Sh; o) .Pp before/after .Rs/.Re; o) .Nm without argument in SYNOPSIS;
2001-07-19#include <termios.h>Todd C. Miller
2001-07-19Fix/complete the handling of the binary ops >< and <> to behaveKenneth R Westerback
like the ipf operators. The 'n >< m' construct (Include Range = PF_OP_IRG) should match ports greater than n and less than m, not greater than or equal to n and less than or equal to m. The 'n <> m' construct (Exclude Range = PF_OP_XRG) should match all ports less than n OR greater than m, not be treated as an alias for ><. Thus PF_OP_GL, which was used for both <> and >< is replaced with PF_OP_IRG and PF_OP_XRG with the 'correct' semantics. OK dhartmei@
2001-07-18try to clarify a double negative. ok jason@Kjell Wooding
2001-07-18protect #define MAX(); ok ho@Markus Friedl
2001-07-18minor updates.Markus Friedl
2001-07-18use correct length for SADB_X_EXT_POLICY message on KAMEMarkus Friedl
tested on bsd/os; ok ho@
2001-07-18new ERROR token, errx() -> warnx() + ERROR; ok deraadt@Markus Friedl
2001-07-18KNF for returnMarkus Friedl
2001-07-18check number range to fit in 32 bitsMichael Shalayeff
2001-07-18put range checks on NUMBER, pointed out by deraadtMichael Shalayeff
2001-07-17spaces, parens, err instead of errx+strerrorMichael Shalayeff
2001-07-17warnx()/YYERROR instead of errx(); suggested by mickey@Markus Friedl
2001-07-17markus doesnt like min-ttl =, begoneNiels Provos
2001-07-17support min-ttl, okay dhartmei@Niels Provos
2001-07-17normalize ip_off, make IP_DF stripping optional, return rst is a flag now.Niels Provos
okay markus@
2001-07-17bitch about ! in pf rule; ok dhartmei@ and markus@Marco S Hyman
2001-07-17bitch about extra command line args; ok dhartmei@ and markus@Marco S Hyman
2001-07-17Only set default proto in the rdr case; markus@ OKTodd C. Miller
2001-07-16errx() if getservbyname() failsMarkus Friedl
2001-07-16get rid of cleanfiles by getting rid of cleanfiles; markus@ okMichael Shalayeff
2001-07-16better flags parsing; dhartmeiMarkus Friedl
2001-07-16add a yacc parser for pf.conf and nat.conf, with help from mickey@,Markus Friedl
plus: -n now turns off all operations, and just parses the conf files ok deraadt@
2001-07-15paste open for each use, cache file descriptorsMichael Shalayeff
2001-07-13escape a wrning on msgbuf, under certain circumstancesMichael Shalayeff
2001-07-13Add noac flag to disable attribute cachingConstantine Sapuntzakis
2001-07-13Be more verbose about why X509_verify_cert() failed. Thanks toHakan Olsson
<sakane@kame.net> for pointing out X509_verify_cert_error_string(). :)
2001-07-13Add lc_X509_verify_cert_error_string().Hakan Olsson
2001-07-11Error on invalid portsConstantine Sapuntzakis
2001-07-11Return 0 on success, convert exit to returnAngelos D. Keromytis
2001-07-10(c)-2001Hakan Olsson
2001-07-10Rewrite packet capture to handle IPv6 addresses.Hakan Olsson
2001-07-10htonl() for null.null_family, ok niels@, ho@Markus Friedl
2001-07-10Oops, we can't use 0 as next_addr()'s error return since 0.0.0.0 isTodd C. Miller
a valid address. Instead I add a pointer to the result as a parameter and return 0 on failure and 1 on success. Also uses inet_pton() instead of inet_aton().
2001-07-10Resolve as a host name if not an IP address; dhartmei@ OKTodd C. Miller
2001-07-10move "proto" in the nat case as wellTodd C. Miller
2001-07-09Move the proto field to be after the "on" argument which is consistentTodd C. Miller
with pf.conf. If no proto is specified tcp is assumed. dhartmei@ OK
2001-07-09Extend nat/rdr syntax. Add source/destination selection. MakeDaniel Hartmeier
interface optional. Suggested by rdump@river.com. nat [on [!] <ifname>] from (any | [!] <addr>[/<mask>]) to (any | [!] <addr>[/<mask>]) -> <addr> [proto (tcp | udp | icmp)] rdr [on [!] <ifname>] from (any | [!] <addr>[/<mask>]) to (any | [!] <addr>[/<mask>]) port <a>[:<b>] -> <addr> port <c>[:*] [proto (tcp | udp | icmp)]