Age | Commit message (Collapse) | Author | |
---|---|---|---|
2008-06-01 | synchronize synopsis and usage. | Igor Sobrado | |
2008-05-31 | add hfs+ type. deraadt@ ok | Federico G. Schwindt | |
2008-05-29 | Second half of PF state table rearrangement. | Ryan Thomas McBride | |
- Mechanical change: Use arrays for state key pointers in pf_state, and addr/port in pf_state_key, to allow the use of indexes. - Fix NAT, pfsync, pfctl, and tcpdump to handle the new state structures. In struct pfsync_state, both state keys are included even when identical. - Also fix some bugs discovered in the existing code during testing. (in particular, "block return" for TCP packets was not returning an RST) ok henning beck deraadt tested by otto dlg beck laurent Special thanks to users Manuel Pata and Emilio Perea who did enough testing to actually find some bugs. | |||
2008-05-27 | Fix count of states flushed, broken when the psnk_af hack was removed in ↵ | Ryan Thomas McBride | |
pf_ioctl.c r1.196. | |||
2008-05-26 | no need for such a wordy .Nd; ok grunk | Jason McIntyre | |
2008-05-26 | - put CAVEATS in the right place | Jason McIntyre | |
- filesystem -> file system, for consistency; from Pierre Riteau | |||
2008-05-26 | fix example in manpage, spotted by Jacek Masiulaniec | Alexander von Gernler | |
While there, stress the idea that users should always have a disklabel inside their vnd images, so they can fsck their filesystems properly input from otto@, corrections by jmc@, "looks better" deraadt@ | |||
2008-05-26 | reorg fields in structs inodesc and inoinfo to reduce size on some archs; from | Otto Moerbeek | |
mickey; ok millert@ | |||
2008-05-26 | If an interface has no link at startup, try to force it up, and then | Theo de Raadt | |
give it about 4 seconds of (silent) grace period before doing the verbose search for a link... tested by various developers who got burned a bit | |||
2008-05-25 | do not need sys/protosw.h | Theo de Raadt | |
2008-05-16 | no need to quote the argument to .Nd, now that it's nice and short; | Jason McIntyre | |
2008-05-16 | There is not really a network address translation device. | Marco Pfatschbacher | |
Remove it from the name section. OK mcbride, henning | |||
2008-05-13 | Disable more wscons bits on socppc. | Miod Vallat | |
2008-05-13 | Make socppc on par with macppc for now. | Miod Vallat | |
2008-05-13 | fix an error in the example partition table; from Adam Patterson | Jason McIntyre | |
ok nick | |||
2008-05-12 | Error out with usage line if additional arguments are given after the | Pierre-Yves Ritschard | |
option parsing. Found out the hard way by jdixon on ifstated. ok sobrado@, jdixon@, millert@ | |||
2008-05-09 | Add support to kill states by rule label or state id. | Marco Pfatschbacher | |
Fix printing of the state id in pfctl -ss -vv. Remove the psnk_af hack to return the number of killed states. OK markus, beck. "I like it" henning, deraadt. Manpage help from jmc. | |||
2008-05-09 | Replace a crockpot of semi-cloned productions for handling port | Theo de Raadt | |
numbers with one, and fix a few other bugs along the way ok mpf henning | |||
2008-05-09 | using the rtm_priority to translate priority number into nice name is | Henning Brauer | |
working much better than using rtm_version for that | |||
2008-05-09 | on route get, display the priority and a cleartext name (like, "bgp" for 48) | Henning Brauer | |
claudio ok | |||
2008-05-09 | convert port byte order in the production; add port keyword; ok deraadt@ | Markus Friedl | |
2008-05-09 | - don't give up when the link is not available on startup: dhclient | Reyk Floeter | |
goes to background and listens on the routing socket for link to come up before it retries. - renew the lease whenever the link was lost and becomes active again. - listen for link state changes on non-ethernet devices like wireless, the link state becomes active when the wireless has been associated to the AP and becomes active. this helps to automatically renew the lease when the user is roaming. ok beck@, deraadt@ | |||
2008-05-09 | divert packets to local socket without modifying the ip header; | Markus Friedl | |
makes transparent proxies much easier; ok beck@, feedback claudio@ | |||
2008-05-08 | add missing header for exit | Charles Longeau | |
ok damien@ | |||
2008-05-08 | make "to any" optional in binat, or well, the implied default. | Theo de Raadt | |
requested by reyk, ok reyk mpf | |||
2008-05-08 | Loosen grammer to permit any number of newlines within most kinds of { } | Theo de Raadt | |
blocks, as requested by reyk; ok reyk mpf henning | |||
2008-05-08 | space | Claudio Jeker | |
2008-05-08 | Fix fallout from the route priority thing. | Esben Norby | |
Don't display out label interface in the second column. ok claudio@ | |||
2008-05-08 | Don't display the outlabel and interface for POP operations. | Esben Norby | |
ok claudio@ | |||
2008-05-08 | Bring back (in a more yacc friendly way) support for setting variables | Theo de Raadt | |
to a sequence of strings and numbers, which get folded together into one string (and later, when used, is re-lexed) ok mpf | |||
2008-05-07 | Remove references to routed. | Claudio Jeker | |
2008-05-07 | RIP routed. | Claudio Jeker | |
You were a nice thing in the 4.2BSD times but now it is time for you to go. Superseded by the shiny privseped ripd that does not have the evil habit to use kernel internals in userland. OK everybody in the onsen 'cause it unbreaks the tree | |||
2008-05-07 | unlink routed. unbreaks the tree (it is obvious claudio has it removed in | Henning Brauer | |
his tree already) | |||
2008-05-07 | do not assume PF_INOUT is 0 in the enum; ok mcbride | Theo de Raadt | |
2008-05-07 | put the mpe bits in the right place; | Jason McIntyre | |
2008-05-07 | scrub packets based on tags; ok henning | Markus Friedl | |
2008-05-07 | Document -priority. looks good norby@ | Claudio Jeker | |
2008-05-07 | allow setting TOS with scrub; ok mcbride, claudio | Markus Friedl | |
2008-05-07 | Add support to show and modify rtm_priority. | Claudio Jeker | |
2008-05-07 | Document the new mpe interface and explain the appropriate commands | Pierre-Yves Ritschard | |
in ifconfig(8). The man pages reference mpls(8) which doesn't exist, but claudio promises it will follow shortly. a thumb up and ok from claudio@ | |||
2008-05-06 | bring in the mpe interface - for ``MPLS Provider Edge'' - this is a work | Pierre-Yves Ritschard | |
in progress and some bits need to be cleaned up but will be in-tree for convenience. ok claudio@, norby@ | |||
2008-05-06 | Yet another missing RTM_VERSION check. Found by norby@. OK henning@ | Claudio Jeker | |
2008-05-06 | print IN6_IFF_AUTOCONF flag, too; ok henning some time ago | Markus Friedl | |
2008-05-06 | Document new state creation counter for pfctl -s labels | Marco Pfatschbacher | |
2008-05-06 | Add code to specify the mpls label switching operation. OK norby@ | Claudio Jeker | |
2008-05-06 | Add a counter to record how many states have been created by a rule. | Marco Pfatschbacher | |
It shows up in pfctl verbose mode and in the 7th field of the labels output. Also remove the label printing for scrub rules, as they do not support labels. OK dhartmei@ (on an earlier version), henning@, mcbride@ | |||
2008-05-06 | Labels in the sockaddr are stored like on the wire so shift and byte swap | Claudio Jeker | |
them. This makes route lookups work again. OK norby@ | |||
2008-05-06 | regen | Claudio Jeker | |
2008-05-06 | Add pop, push and swap options used by MPLS. OK norby@ | Claudio Jeker | |
2008-05-06 | Minor cleanup. OK norby@ | Claudio Jeker | |