Age | Commit message (Collapse) | Author | |
---|---|---|---|
2002-06-10 | Move enum out of struct (gcc 3.1 wasn't happy), from David Krause | Daniel Hartmeier | |
2002-06-10 | save some entropy in random key generation. oked by angelos many moons ago | Kjell Wooding | |
2002-06-10 | some olde version piece crept into my diffski; pt out by dfa@ | Michael Shalayeff | |
2002-06-10 | split scrub rule processing into its own yacc target, | Kjell Wooding | |
for imminent config file merge. ok frantzen@ | |||
2002-06-09 | Make pf_nat.saddr/daddr a pf_rule_addr instead of pf_addr_wrap, so it | Daniel Hartmeier | |
includes ports and operator. | |||
2002-06-09 | rm trailing whitespace | Todd T. Fries | |
2002-06-09 | spaced out developers... | Theo de Raadt | |
2002-06-09 | spelling; moritz@jodeit.org | Theo de Raadt | |
2002-06-09 | Print message for kern.mbstat (to use netstat) | Angelos D. Keromytis | |
2002-06-09 | Document kern.mbstat | Angelos D. Keromytis | |
2002-06-09 | Mark attr payload as handled. Also make sure the correct payload | Hakan Olsson | |
length is returned. | |||
2002-06-09 | Add list parsing in RDR rules: e.g. | Kjell Wooding | |
rdr on $IFLIST proto tcp from $SRC_LIST to $DST_LIST port 21 \ -> 127.0.0.1 port 8021 ok dhartmei@ | |||
2002-06-09 | use strchr() instead of index() | Theo de Raadt | |
2002-06-09 | Bad me. Make sure it compiles before commit. | Hakan Olsson | |
2002-06-09 | CFG_REQUEST | Hakan Olsson | |
2002-06-09 | Style. | Hakan Olsson | |
2002-06-09 | Missed this. | Hakan Olsson | |
2002-06-09 | Tighten the code to work for both SET/ACK and REQ/REPLY modes. | Hakan Olsson | |
2002-06-08 | Document new sysctls. | Angelos D. Keromytis | |
2002-06-08 | Factor out hash operations, some other cleanup. | Hakan Olsson | |
2002-06-08 | add cfg_type | Hakan Olsson | |
2002-06-08 | nuke unused parameter af to expand_label_port | Henning Brauer | |
ok dhartmei@, pb@ | |||
2002-06-08 | Change remaining read-only lookup tables to const, suggestion drahn@ | Daniel Hartmeier | |
2002-06-08 | comment on IPv6 link-local twists | Jun-ichiro itojun Hagino | |
2002-06-08 | support IPv4 in -prefixlen. | Jun-ichiro itojun Hagino | |
2002-06-08 | a bit more for the responder cases | Hakan Olsson | |
2002-06-08 | pf_timeouts is shared between pfctl and authpf, put it in the shared file. | Dale Rahn | |
unbreak build. | |||
2002-06-08 | - extended SMART support. | Grigoriy Orlov | |
- style, typos. - Big part of program redesigned and become more clean and simple. Work done by Alexander Yurchenko <grange@openbsd.ru>. Readattr command implementation and some cleanups by me. Costa@ ok. | |||
2002-06-08 | Fix cut & paste error from last commit. | Grigoriy Orlov | |
2002-06-08 | add list expansion to src/dest in NAT rules. i.e. | Kjell Wooding | |
nat on fxp0 from { 10.0.0.0/24, 10.0.1.0/24 } to \ { 172.6.1.1, 172.14.1.2/32 } -> fxp0 ok theo, dhartmei@ | |||
2002-06-08 | remove macro concatenation via += per Theo's advice | Henning Brauer | |
2002-06-08 | allow macro concatenation like | Henning Brauer | |
webservers = "{ 10.0.0.1, 10.0.0.7, 10.0.0.8, " webservers += " 10.0.0.17, 10.0.0.25, 10.0.0.37 }" ok frantzen@, dhartmei@ | |||
2002-06-08 | Make state timeouts configurable per rule, like | Daniel Hartmeier | |
pass in from any to any port www keep state (tcp.established 60) ok frantzen@ | |||
2002-06-08 | expand $nr -> rule number in rule labels | Henning Brauer | |
okay dhartmei@, frantzen@ | |||
2002-06-08 | expand $proto in rule labels | Henning Brauer | |
okay frantzen@ dhartmei@ | |||
2002-06-07 | Handle realloc() failure gracefully. Terminates with err() anyway in this | Daniel Hartmeier | |
case, but we don't want to trigger "p = realloc(p," grepping causing false alarms here. | |||
2002-06-07 | henning, read this to see what i mean by KNF | Theo de Raadt | |
2002-06-07 | add the possibility to configure a TTL while return-rst | Philipp Buehler | |
ok dhartmei@, ipv6 part itojun@ ok | |||
2002-06-07 | Avoid some gcc3 warnings. From David Krause <openbsd@davidkrause.com> | Hakan Olsson | |
2002-06-07 | Add "(max <number>)" option for "keep/modulate state" to limit the number | Daniel Hartmeier | |
of concurrent connections a rule can create. ok frantzen@ | |||
2002-06-07 | Add wsconsctl recognition support for adb keyboard. | Dale Rahn | |
2002-06-07 | Extend as per current IANA assignments | Hakan Olsson | |
2002-06-07 | Also allocate space for the attribute header. | Hakan Olsson | |
2002-06-07 | Start for support of IKECFG in SET/ACK mode. Server side only so far. | Hakan Olsson | |
2002-06-07 | allow using $srcaddr, $srcport, $dstaddr and $dstport in rule labels, | Henning Brauer | |
evaluated at parse time. ok dhartmei@ | |||
2002-06-07 | minor KNF while I'm here | Henning Brauer | |
ok dhartmei@ | |||
2002-06-07 | make IPv6 scope identification work for dst (from any to fe80::1%lo0) | Jun-ichiro itojun Hagino | |
2002-06-07 | support scoped IPv6 address in from/to portion. | Jun-ichiro itojun Hagino | |
2002-06-07 | typo | Hakan Olsson | |
2002-06-07 | document net.inet6.ip6.v6only | Jun-ichiro itojun Hagino | |