summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2002-12-09allow setting of ifcost with brconfig. enables selection of preferredMarkus Friedl
2002-12-09do not allow redefinitions in variable option blocks; henning okTheo de Raadt
2002-12-08strncpy is evil.Henning Brauer
2002-12-08GNU semantics say that if optstring begins with '-' thenTodd C. Miller
2002-12-08allow flexible options order like Theo did for rules.Henning Brauer
2002-12-07Support parameters in anchor rules. Allows conditional evaluation, like:Daniel Hartmeier
2002-12-07more KNFHenning Brauer
2002-12-07KNFHenning Brauer
2002-12-07TAILQ_INSERT_TAIL instead of TAILQ_INSERT_HEAD. Makes addresses printRyan Thomas McBride
2002-12-07shadow cleanupHenning Brauer
2002-12-07kill an unused param to lungetcHenning Brauer
2002-12-07KNFHenning Brauer
2002-12-07get the interface's MTU instead of assuming 1500Henning Brauer
2002-12-07Convert the hash of a string key to network byte order. Makes regressionRyan Thomas McBride
2002-12-06Set transform from default. PR#3008Hakan Olsson
2002-12-06fix linebreak in example; ok ho@, jason@Markus Friedl
2002-12-06styleHenning Brauer
2002-12-06Remove negated address list check again, doesn't work right yet.Daniel Hartmeier
2002-12-06let pfctl -v print out "block drop" instead of just "block" in the dropHenning Brauer
2002-12-06Section and tag comparisions should be case-insensitive. PR#3010, Mike Neuman.Hakan Olsson
2002-12-06unkown; torh@bogus.netTheo de Raadt
2002-12-06Introduce anchors and named rule sets, allowing to load additional ruleDaniel Hartmeier
2002-12-05fix a small cosmetic problem. if ifa_lookup was called in LOOKUP_NET mode,Henning Brauer
2002-12-05one step further to "program output is valid program input" and the relatedHenning Brauer
2002-12-05-quote varset in -v outputHenning Brauer
2002-12-05Replace warnx with warn on ioctls so that we get the error message associatedRyan Thomas McBride
2002-12-05correct sizeof() to memset(). sync w/kameJun-ichiro itojun Hagino
2002-12-04bit_ffc(3) returns a -1 location for a full bitset. Problem found byHakan Olsson
2002-12-04allow ACQUIRE with empty EXT_ADDRESS_SRC; PR 2996; ok angelos@, ho@Markus Friedl
2002-12-04in host(), apply a given netmask to all members of the node_host listHenning Brauer
2002-12-04do not warn for unused variables except with -v -v; henning okTheo de Raadt
2002-12-03Add -4/-6 cmdline options to select what address family (IPv4,v6) to use.Hakan Olsson
2002-12-03LOG_DBG for missing ca/, certs/, crls/ dirs, notHakan Olsson
2002-12-03be nice and shutdown the socket after beeing done; pointed out by kenjiroHenning Brauer
2002-12-02KNFHenning Brauer
2002-12-02permit more flexible pass/block lines. the options giving at the end ofTheo de Raadt
2002-12-02allow for "altq on $interface" without specifying a bandwidth. TheHenning Brauer
2002-12-01deal with not-ALTQ-enabled kernelsHenning Brauer
2002-12-01Match pf_ioctl.c cleanup; set up the pool_ticket when loading rulesRyan Thomas McBride
2002-11-30oopsTheo de Raadt
2002-11-30do not syslog with extra newlineTheo de Raadt
2002-11-30move damn unmask() proto into place as wellMichael Shalayeff
2002-11-30move unmask back into pf_print_state.c where it was, and please keep it there...Michael Shalayeff
2002-11-29no need for extra hrs; henning@ okMichael Shalayeff
2002-11-29coredumps are not nice.Henning Brauer
2002-11-29in pfctl_find_altq_node also compare the interface.Henning Brauer
2002-11-29print queuespec only once in verbose mode, even if referenced more oftenHenning Brauer
2002-11-29FREE_LIST nqueues later; can be used more than onceHenning Brauer
2002-11-28qlimit before tbrsizeHenning Brauer
2002-11-28print qlimit on altq if not equal to the default valueHenning Brauer