Age | Commit message (Collapse) | Author | |
---|---|---|---|
2002-05-09 | Add a max-mss option to the scrub rule which will enforce a maximum mss | jasoni | |
by lowering it to the given value. - ok dhartmei@, provos@ | |||
2002-05-09 | Introduce user based filtering. Rules can specify ruid and euid (real and | Daniel Hartmeier | |
effective user ID) much like ports. The user of a packet is either the user that opens an outgoing connection, the one that listens on a socket, or 'unknown' if the firewall is not a connection endpoint (for forwarded connections). Socket uid lookup code from jwk@bug.it. | |||
2002-05-08 | add a newline after pcap error string (as pcap_geterr() doesn't). | jasoni | |
- ok dhartmei@ (a long time ago) | |||
2002-05-06 | Correct info in "-a maxcontig" section. | Todd C. Miller | |
2002-05-06 | Use the default calculation of maxcontig, based on fs_bsize and MAXPHYS, so | Todd C. Miller | |
that the cluster summary information is correct for bsize=4k and MAXPHYS=64k. From NetBSD (mycroft) | |||
2002-05-05 | Instead of returning a useless kernel space pointer for the rule that | Daniel Hartmeier | |
created the state from DIOCGETSTATE(S), return the integer rule number, Print rule number (if existant) from pfctl -vss. Suggested by Jeff Nathan. | |||
2002-04-30 | print usage right | Theo de Raadt | |
2002-04-30 | use scsictl, not scsictl(8); closes pr/2577. | Federico G. Schwindt | |
2002-04-29 | wierd -> weird | Peter Valchev | |
2002-04-26 | Fix typo--2347 should be 2047; from FreeBSD (moses) | Todd C. Miller | |
2002-04-26 | use struct in_aliasreq instead of ifaliasreq when setting new inet | Federico G. Schwindt | |
address. solves a sigbus error seen on sparc64 with new binutils. from itojun@ | |||
2002-04-26 | Mention that just because you can store a 104 bit WEP key on the card | Todd C. Miller | |
doesn't mean the card can actually do 104 bit WEP. | |||
2002-04-25 | sysctl wants size_t. | Marc Espie | |
2002-04-25 | no need for __alignment__, it was paste error. from fgs/deraadt | Jun-ichiro itojun Hagino | |
2002-04-24 | Add dynamic (in-kernel) interface name -> address translation. Instead of | Daniel Hartmeier | |
using just the interface name instead of an address and reloading the rule set whenever the interface changes its address, the interface name can be put in parentheses, and the kernel will keep track of changes and update rules. There is no additional cost for evaluating rules (per packet), the cost occurs when an interface changes address (and the rules are traversed and updated where necessary). | |||
2002-04-23 | fix grammar in tcpdump example | Mike Frantzen | |
2002-04-23 | In mount.h, rename field export -> export_info, to avoid collision with C++. | Marc Espie | |
Synch files that use that field. (This argument is an internal interface specific to OpenBSD, so it won't cause compatibility problems.) (No bump, not an ABI change). ok art, millert... | |||
2002-04-23 | Allow explicit filtering of fragments when they are not reassembled. | Daniel Hartmeier | |
Document fragment handling in the man page. Short version: if you're scrubbing everything (as is recommended, in general), nothing changes. If you want to deal with fragments manually, read the man page. ok frantzen. | |||
2002-04-23 | More up to date. | Hakan Olsson | |
2002-04-22 | Handle configuration lines that end in whitespace or ^M. | Hakan Olsson | |
Also avoid a potential memory leak. | |||
2002-04-21 | Speak English please. | Todd C. Miller | |
2002-04-20 | Build pdisk for mac68k as well. | Miod Vallat | |
2002-04-20 | machine/limits.h is not userland. Use limits.h | Marc Espie | |
ok millert@ | |||
2002-04-19 | Do not depend upon <ansidecl.h> to compile. | Miod Vallat | |
Conforming to espie's evil plans, and ok espie@ tdeval@ | |||
2002-04-19 | Do not commit kbd for arches where it provides no real support. | Miod Vallat | |
While there, remove dead parts. | |||
2002-04-18 | There is no point in embedding an out-of-date copy of <sys/disklabel.h>, | Miod Vallat | |
especially since this manual page refers to said file. ok deraadt@ millert@ | |||
2002-04-18 | use strlcpy | Theo de Raadt | |
2002-04-17 | Reset lineno for each file, so pfctl -R ... -N ... reports the right | Daniel Hartmeier | |
line number for non-first files. Reported by aaron@ | |||
2002-04-15 | Use in_addr_t instead of unsigned long, which breaks on alpha (64-bit). | Daniel Hartmeier | |
Closes PR 2547. Reported by Dries Schellekens. Found by frantzen@. | |||
2002-04-12 | kbd setting code for the installer. kbd needs to be compiled without KVM | Theo de Raadt | |
support. smat@acm.org, miod, and krw. | |||
2002-04-11 | o Document the difference between "open system" and "shared key" auth | Todd C. Miller | |
o IBSS is now port type 4 o Add an explanation of the various port types | |||
2002-04-11 | Accept "ibss" for port type 4 | Todd C. Miller | |
2002-04-10 | Document IKE mode-cfg config. deraadt@ ok. | Hakan Olsson | |
2002-04-10 | Document the FIFO ui. deraadt@ ok. | Hakan Olsson | |
2002-04-10 | Add missing IFM_OPTIONS macro. Previously 'ifconfig -mediaopt' could | Todd C. Miller | |
clear bits other than media options. Fix from NetBSD. | |||
2002-04-08 | Fix typo, from Raymond M Schneider | Daniel Hartmeier | |
2002-04-08 | more details to media and mediaopt; miod ok | Theo de Raadt | |
2002-04-06 | o Add -D option to set antenna diversity on Symbol cards | Todd C. Miller | |
o Mention other symbol-specific things o Convert tables to real mdoc colummn lists. | |||
2002-04-06 | Use new WI_NIC_* names for lucent cards instead of hard-coded hex values. | Todd C. Miller | |
2002-04-04 | Add more debugging info in -d mode. Some from NetBSD (via Brett Eldridge). | Todd C. Miller | |
2002-04-03 | WCCP sysctl -- ok deraadt@ | Angelos D. Keromytis | |
2002-04-02 | minor cleanups | Theo de Raadt | |
2002-04-02 | Fix -A flag values in summary | Todd C. Miller | |
2002-04-02 | Prism2 firmware should be reported as version a.b.c not a.b variant c. | Todd C. Miller | |
Only Lucent uses the 'variant' form. Also, prism2 firmware 0.8.2 does WEP w/o requiring promisc mode (from NetBSD). OK mickey@ | |||
2002-04-01 | Also accept "adhoc" (or "ad-hoc"), "bss", and "hostap" instead of | Todd C. Miller | |
numbers for -p option. | |||
2002-04-01 | change return values back from EX_* to 0/1 | Daniel Hartmeier | |
2002-04-01 | members of wi_counters are u_int32_t so print them with "%u" not "%d" | Todd C. Miller | |
2002-04-01 | Fix max WEP key len. Max len for a 104 bit WEP key len is 26 hex digits | Todd C. Miller | |
(not counting the leading 0x) or 13 characters. | |||
2002-04-01 | yes, string could be up to 32; pt out by Cory Bosley (openbsd@bosleys.org) ↵ | Michael Shalayeff | |
via pr#2508 | |||
2002-04-01 | style(9) improvements from Raymond M Schneider | Daniel Hartmeier | |