summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2002-06-08Change remaining read-only lookup tables to const, suggestion drahn@Daniel Hartmeier
2002-06-08comment on IPv6 link-local twistsJun-ichiro itojun Hagino
2002-06-08support IPv4 in -prefixlen.Jun-ichiro itojun Hagino
2002-06-08a bit more for the responder casesHakan Olsson
2002-06-08pf_timeouts is shared between pfctl and authpf, put it in the shared file.Dale Rahn
unbreak build.
2002-06-08- extended SMART support.Grigoriy Orlov
- style, typos. - Big part of program redesigned and become more clean and simple. Work done by Alexander Yurchenko <grange@openbsd.ru>. Readattr command implementation and some cleanups by me. Costa@ ok.
2002-06-08Fix cut & paste error from last commit.Grigoriy Orlov
2002-06-08add list expansion to src/dest in NAT rules. i.e.Kjell Wooding
nat on fxp0 from { 10.0.0.0/24, 10.0.1.0/24 } to \ { 172.6.1.1, 172.14.1.2/32 } -> fxp0 ok theo, dhartmei@
2002-06-08remove macro concatenation via += per Theo's adviceHenning Brauer
2002-06-08allow macro concatenation likeHenning Brauer
webservers = "{ 10.0.0.1, 10.0.0.7, 10.0.0.8, " webservers += " 10.0.0.17, 10.0.0.25, 10.0.0.37 }" ok frantzen@, dhartmei@
2002-06-08Make state timeouts configurable per rule, likeDaniel Hartmeier
pass in from any to any port www keep state (tcp.established 60) ok frantzen@
2002-06-08expand $nr -> rule number in rule labelsHenning Brauer
okay dhartmei@, frantzen@
2002-06-08expand $proto in rule labelsHenning Brauer
okay frantzen@ dhartmei@
2002-06-07Handle realloc() failure gracefully. Terminates with err() anyway in thisDaniel Hartmeier
case, but we don't want to trigger "p = realloc(p," grepping causing false alarms here.
2002-06-07henning, read this to see what i mean by KNFTheo de Raadt
2002-06-07add the possibility to configure a TTL while return-rstPhilipp Buehler
ok dhartmei@, ipv6 part itojun@ ok
2002-06-07Avoid some gcc3 warnings. From David Krause <openbsd@davidkrause.com>Hakan Olsson
2002-06-07Add "(max <number>)" option for "keep/modulate state" to limit the numberDaniel Hartmeier
of concurrent connections a rule can create. ok frantzen@
2002-06-07Add wsconsctl recognition support for adb keyboard.Dale Rahn
2002-06-07Extend as per current IANA assignmentsHakan Olsson
2002-06-07Also allocate space for the attribute header.Hakan Olsson
2002-06-07Start for support of IKECFG in SET/ACK mode. Server side only so far.Hakan Olsson
2002-06-07allow using $srcaddr, $srcport, $dstaddr and $dstport in rule labels,Henning Brauer
evaluated at parse time. ok dhartmei@
2002-06-07minor KNF while I'm hereHenning Brauer
ok dhartmei@
2002-06-07make IPv6 scope identification work for dst (from any to fe80::1%lo0)Jun-ichiro itojun Hagino
2002-06-07support scoped IPv6 address in from/to portion.Jun-ichiro itojun Hagino
2002-06-07typoHakan Olsson
2002-06-07document net.inet6.ip6.v6onlyJun-ichiro itojun Hagino
2002-06-07Add 'ikecfg' as a valid Flags= value.Hakan Olsson
2002-06-07own sadb_protocol struct for EXT_PROTOCOLHakan Olsson
2002-06-07Send a flow type.Angelos D. Keromytis
2002-06-07This should solve PR#2729.Hakan Olsson
2002-06-07Before detaching, log output should go to stderr, not syslog.Hakan Olsson
2002-06-06split out the pf_state printing functions to be used elsewhere, no ↵Michael Shalayeff
functional change; dhartmei@ ok
2002-06-06Answer requests for netmasks, subnets, and dhcp-servers as well. AddHakan Olsson
debug and warning messages for missing/bad values. Rewrite it a bit. niklas@ ok.
2002-06-06Tyop. IBBS->IBSSKjell Wooding
2002-06-06Cleanup / styleHakan Olsson
2002-06-06print normalized signal strength; from Gabriel Kihlman <gk@univits.se>Michael Shalayeff
2002-06-06styleHakan Olsson
2002-06-06better format/typeHakan Olsson
2002-06-06Style, and a few additional format/type mods.Hakan Olsson
2002-06-05more correction to RTF_HOST handling.Jun-ichiro itojun Hagino
2002-06-05clarify nwkey usage; ok millert@Jason Peel
2002-06-04Fix identify logic to match kernel. Works better on big endian architectures.Constantine Sapuntzakis
2002-06-04do not automagically have -prefixlen 128 on IPv6 host route.Jun-ichiro itojun Hagino
From: Dawid Szymanski <dawszy@arhea.net>
2002-06-04spelling; raj@cerias.purdue.eduTheo de Raadt
2002-06-03Add NAT keyword so it is picked up by apropos (man -k NAT). ok dhartmei@Kjell Wooding
2002-06-03Also print labels in 'pfctl -s all'. ok dhartmei@Kjell Wooding
2002-06-02BSD air-tools 0.2 patches from dachb0den labs; h1kari@dachb0den.comTodd C. Miller
The common.h include file has been incorporated into if_wi_ieee.h similar to what is in FreeBSD.
2002-06-01size_t must be cast to (unsigned long) and printed using %luTheo de Raadt