summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2003-02-04don't set the Transform for Default-phase-1-configuration twice, ok ho@Markus Friedl
2003-02-04default to 3DES-SHA-RSA_SIG (same as in OpenBSD 3.2); ok ho@Markus Friedl
2003-02-04use size_t for struct size and offset calculations.Cedric Berger
check msize for overflow and realloc overflow.
2003-02-04Cleanup buffer before reuse. Consistency + defensive programming.Cedric Berger
2003-02-03typos;Jason McIntyre
ipsecadm(8): examples ho@ help and ok markus@
2003-02-03prettyTheo de Raadt
2003-02-03Don't allow loopback interfaces as route/reply/dup-to targets. ok henning@Daniel Hartmeier
2003-02-03remove loadopt global definition and cleanup a bit.Cedric Berger
ok henning@
2003-02-03zap dead codeHenning Brauer
2003-02-03fix a problem with queue definitions when load options (like -N etc) areHenning Brauer
given; they used to check for their parent interface/queue even in this case. ok dhartmei@ cedric@
2003-02-03More cleanup in tables thanks to Andrey Matveev:Cedric Berger
- get rid of unnecessary header netinet/in.h in pfctl_radix.c and pfctl_table.c - do fclose(3) only when we use config file, not STDIN - get rid of unneeded temporatory variables - minor KNF
2003-02-02there is no need to pass opts to parse_rules explicitely; it's passed asHenning Brauer
part of the struct pfctl.
2003-02-02no const for int; cedric@Henning Brauer
2003-02-02const'ify params for the host stuffHenning Brauer
ok theo
2003-02-02as correctly pointed out by cedric@, the :network and :broadcast parsingHenning Brauer
code really belongs to host_if() and not host(); I dunno why I did put it in host()... ok dhartmei@ deraadt@
2003-02-01typos;Jason McIntyre
chat(8): removed reference to uucico(8) ok deraadt@
2003-01-31typos;Jason McIntyre
eeprom(8): added .Ar to fields, removed references to sun3 sshd(8): help and ok markus@ help and ok millert@
2003-01-31o When checking for root, look at effective, not real uid; checking theTodd C. Miller
real uid made sense when route(8) was setuid root but it no longer is. o ANSIfy deraadt@ OK
2003-01-30in these two cases strdup makes more sense than asprintf, pointed out byHenning Brauer
camield@
2003-01-30add support for :network and :broadcast modifiers to interface names.Henning Brauer
sample: pass in on dc0 from dc0:network to any keep state block in on dc0 from any to dc0:broadcast ok theo daniel
2003-01-29typos;Jason McIntyre
many tweaks by millert@ (thanks) thanks mpech@ for help with adduser(8) ok millert@
2003-01-28typos; added white boldface to examplesJason McIntyre
ok deraadt@
2003-01-27bit KNFHenning Brauer
2003-01-27KNFTheo de Raadt
2003-01-27When -a is specified, the operation affects an anchor only, so don't tryDaniel Hartmeier
to replace queues (or options) which are global and can't be loaded into an anchor. Found by j@pureftpd.org.
2003-01-25Another nice cleanup patch from Andrey MatveevCedric Berger
KNF + remove/reorg headers.
2003-01-25Match changes for rdr port ranges made to pf.c:Ryan Thomas McBride
- fixes behaviour of rdr on le0 from foo to bar port 1:20 -> (lo0) port 22 - makes calculated mapping more explicit for the -> (lo0) port 22:* case testing from dhartmei@ ok dhartmei@
2003-01-25Fix NOACTION with table statements.Cedric Berger
2003-01-25Permit initialisation of a table content from a file in pf.conf.Cedric Berger
Cleaning up of the table options parsing, more flexible. idea+cleanup deraadt@, ok dhartmei@, pass all regress tests.
2003-01-25Correctly check illegal constructs with tables. Better error messages.Cedric Berger
ok dhartmei@ pass all regress tests.
2003-01-25tables are just tables; implementation details (radix) don't need to beHenning Brauer
mentioned. accidently already slipped in w/ my last commit; this one is forced. ok theo
2003-01-25if a table name ist too long, it's actually nice to tell so instead of justHenning Brauer
aborting with a syntax error
2003-01-25kill whitespace at EOLHenning Brauer
2003-01-24document pfctl -vvsqHenning Brauer
2003-01-24make rate2str include the unit in the ouput even if it is 0b. was irrelevantHenning Brauer
before as you cannot specify "bandwidth 0b" on a rule; now that rate2str is used for the stats output it does matter.
2003-01-24pfctl -vvsq shows bandwidth and packets/s for PRIQ now tooHenning Brauer
2003-01-24let pfctl -vvsq loop and display measured bandwidth and packets/s per queue.Henning Brauer
cbq only for now.
2003-01-24export rate2strHenning Brauer
2003-01-24tune internal APIs a bitHenning Brauer
2003-01-24bring in 3 yet unused helper functions before I lose 'em againHenning Brauer
2003-01-23Little cleanup thanks to Andrey MatveevCedric Berger
2003-01-22Typo.Hakan Olsson
2003-01-22Automatically create tables for the "add" and "replace" table commands.Cedric Berger
Requested by deraadt@, pass all regress tests.
2003-01-21Support for TCP window scaling (RFC 1323). ok frantzen@Daniel Hartmeier
2003-01-21kern.watchdog; ok deraadt@Markus Friedl
2003-01-21remove redundant ifCamiel Dobbelaar
ok dhartmei
2003-01-21add kern.watchdog sysctl and generic watchdog interface;Markus Friedl
based on feedback and discussions with mickey, henric, fgsch and jakob. ok art@, mickey@, jakob@, henric@
2003-01-20Cut & paste madness. We were (un)lucky it worked before!Cedric Berger
2003-01-20typos; alan@alanday.comTheo de Raadt
2003-01-20unused var; found by dhartmei@ and camield@Henning Brauer