summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2002-05-09Add a max-mss option to the scrub rule which will enforce a maximum mssjasoni
by lowering it to the given value. - ok dhartmei@, provos@
2002-05-09Introduce user based filtering. Rules can specify ruid and euid (real andDaniel Hartmeier
effective user ID) much like ports. The user of a packet is either the user that opens an outgoing connection, the one that listens on a socket, or 'unknown' if the firewall is not a connection endpoint (for forwarded connections). Socket uid lookup code from jwk@bug.it.
2002-05-08add a newline after pcap error string (as pcap_geterr() doesn't).jasoni
- ok dhartmei@ (a long time ago)
2002-05-06Correct info in "-a maxcontig" section.Todd C. Miller
2002-05-06Use the default calculation of maxcontig, based on fs_bsize and MAXPHYS, soTodd C. Miller
that the cluster summary information is correct for bsize=4k and MAXPHYS=64k. From NetBSD (mycroft)
2002-05-05Instead of returning a useless kernel space pointer for the rule thatDaniel Hartmeier
created the state from DIOCGETSTATE(S), return the integer rule number, Print rule number (if existant) from pfctl -vss. Suggested by Jeff Nathan.
2002-04-30print usage rightTheo de Raadt
2002-04-30use scsictl, not scsictl(8); closes pr/2577.Federico G. Schwindt
2002-04-29wierd -> weirdPeter Valchev
2002-04-26Fix typo--2347 should be 2047; from FreeBSD (moses)Todd C. Miller
2002-04-26use struct in_aliasreq instead of ifaliasreq when setting new inetFederico G. Schwindt
address. solves a sigbus error seen on sparc64 with new binutils. from itojun@
2002-04-26Mention that just because you can store a 104 bit WEP key on the cardTodd C. Miller
doesn't mean the card can actually do 104 bit WEP.
2002-04-25sysctl wants size_t.Marc Espie
2002-04-25no need for __alignment__, it was paste error. from fgs/deraadtJun-ichiro itojun Hagino
2002-04-24Add dynamic (in-kernel) interface name -> address translation. Instead ofDaniel Hartmeier
using just the interface name instead of an address and reloading the rule set whenever the interface changes its address, the interface name can be put in parentheses, and the kernel will keep track of changes and update rules. There is no additional cost for evaluating rules (per packet), the cost occurs when an interface changes address (and the rules are traversed and updated where necessary).
2002-04-23fix grammar in tcpdump exampleMike Frantzen
2002-04-23In mount.h, rename field export -> export_info, to avoid collision with C++.Marc Espie
Synch files that use that field. (This argument is an internal interface specific to OpenBSD, so it won't cause compatibility problems.) (No bump, not an ABI change). ok art, millert...
2002-04-23Allow explicit filtering of fragments when they are not reassembled.Daniel Hartmeier
Document fragment handling in the man page. Short version: if you're scrubbing everything (as is recommended, in general), nothing changes. If you want to deal with fragments manually, read the man page. ok frantzen.
2002-04-23More up to date.Hakan Olsson
2002-04-22Handle configuration lines that end in whitespace or ^M.Hakan Olsson
Also avoid a potential memory leak.
2002-04-21Speak English please.Todd C. Miller
2002-04-20Build pdisk for mac68k as well.Miod Vallat
2002-04-20machine/limits.h is not userland. Use limits.hMarc Espie
ok millert@
2002-04-19Do not depend upon <ansidecl.h> to compile.Miod Vallat
Conforming to espie's evil plans, and ok espie@ tdeval@
2002-04-19Do not commit kbd for arches where it provides no real support.Miod Vallat
While there, remove dead parts.
2002-04-18There is no point in embedding an out-of-date copy of <sys/disklabel.h>,Miod Vallat
especially since this manual page refers to said file. ok deraadt@ millert@
2002-04-18use strlcpyTheo de Raadt
2002-04-17Reset lineno for each file, so pfctl -R ... -N ... reports the rightDaniel Hartmeier
line number for non-first files. Reported by aaron@
2002-04-15Use in_addr_t instead of unsigned long, which breaks on alpha (64-bit).Daniel Hartmeier
Closes PR 2547. Reported by Dries Schellekens. Found by frantzen@.
2002-04-12kbd setting code for the installer. kbd needs to be compiled without KVMTheo de Raadt
support. smat@acm.org, miod, and krw.
2002-04-11o Document the difference between "open system" and "shared key" authTodd C. Miller
o IBSS is now port type 4 o Add an explanation of the various port types
2002-04-11Accept "ibss" for port type 4Todd C. Miller
2002-04-10Document IKE mode-cfg config. deraadt@ ok.Hakan Olsson
2002-04-10Document the FIFO ui. deraadt@ ok.Hakan Olsson
2002-04-10Add missing IFM_OPTIONS macro. Previously 'ifconfig -mediaopt' couldTodd C. Miller
clear bits other than media options. Fix from NetBSD.
2002-04-08Fix typo, from Raymond M SchneiderDaniel Hartmeier
2002-04-08more details to media and mediaopt; miod okTheo de Raadt
2002-04-06o Add -D option to set antenna diversity on Symbol cardsTodd C. Miller
o Mention other symbol-specific things o Convert tables to real mdoc colummn lists.
2002-04-06Use new WI_NIC_* names for lucent cards instead of hard-coded hex values.Todd C. Miller
2002-04-04Add more debugging info in -d mode. Some from NetBSD (via Brett Eldridge).Todd C. Miller
2002-04-03WCCP sysctl -- ok deraadt@Angelos D. Keromytis
2002-04-02minor cleanupsTheo de Raadt
2002-04-02Fix -A flag values in summaryTodd C. Miller
2002-04-02Prism2 firmware should be reported as version a.b.c not a.b variant c.Todd C. Miller
Only Lucent uses the 'variant' form. Also, prism2 firmware 0.8.2 does WEP w/o requiring promisc mode (from NetBSD). OK mickey@
2002-04-01Also accept "adhoc" (or "ad-hoc"), "bss", and "hostap" instead ofTodd C. Miller
numbers for -p option.
2002-04-01change return values back from EX_* to 0/1Daniel Hartmeier
2002-04-01members of wi_counters are u_int32_t so print them with "%u" not "%d"Todd C. Miller
2002-04-01Fix max WEP key len. Max len for a 104 bit WEP key len is 26 hex digitsTodd C. Miller
(not counting the leading 0x) or 13 characters.
2002-04-01yes, string could be up to 32; pt out by Cory Bosley (openbsd@bosleys.org) ↵Michael Shalayeff
via pr#2508
2002-04-01style(9) improvements from Raymond M SchneiderDaniel Hartmeier