summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2002-07-06Security Mode feature set.Grigoriy Orlov
2002-07-05unbreak.Henning Brauer
2002-07-05another small bug I found while installing a -current pf firewall.Henning Brauer
2002-07-05allow unsetting the statusinterface viaHenning Brauer
2002-07-05volatile sig_atomic_t, suggested by Theo.Hakan Olsson
2002-07-05gcc 3.1 nits. Pointed out by David Krause.Hakan Olsson
2002-07-04Do not assume we have an active exchange during payload validation.Hakan Olsson
2002-07-04styleHakan Olsson
2002-07-03ansiTheo de Raadt
2002-07-03convert to ansi. suddenly realise that means yet another function is aTheo de Raadt
2002-07-01cut and pasto (fetch maxage correctly); Benny Holmgren <bigfoot@astrakan.hig.se>Jason Wright
2002-07-01do not Xr startkeyTheo de Raadt
2002-07-01streamline parse buffer handling (no need to copy value that is notMarc Espie
2002-07-01KNFTheo de Raadt
2002-06-29ansiTheo de Raadt
2002-06-29IPPROTO_ICMP will not change in our life; itojun okTheo de Raadt
2002-06-28Don't check for address family conflicts in nat/rdr before expansion,Daniel Hartmeier
2002-06-27fix synopsis, closes pr2775Henning Brauer
2002-06-27repair formatting - the new "enabled since" format is longer than the oldHenning Brauer
2002-06-26Missing .Xr's from Margarida Sequeira <niness@devilness.org>.Federico G. Schwindt
2002-06-26include <bsd.own.mk> before using NOMAN; ok millert@Wilbern Cobb
2002-06-25Minor fixes, including duplicate and missing words; Brian PooleTodd C. Miller
2002-06-25move pfctl options -t, -m, -O and -l to pf.conf. These are set using theHenning Brauer
2002-06-24Use interface when specified in scrub rule. No support for ! or {} yet.Daniel Hartmeier
2002-06-23uid_t and gid_t are unsignedTheo de Raadt
2002-06-22document -T option, PR#2766. ok deraadt@Jakob Schlyter
2002-06-20wi_ssid_len is in little-endian as well, so convert it. fixes ssidFederico G. Schwindt
2002-06-20Copy address family from inet/inet6 keyword, if specified.Daniel Hartmeier
2002-06-20enable wicontrol on sparc64 as well; deraadt ok.Federico G. Schwindt
2002-06-19Since we can no longer count on isprint() to tell us whether or notTodd C. Miller
2002-06-19"Enabled for Ss" -> "Enabled for D days HH:MM:SS", ok frantzen@Daniel Hartmeier
2002-06-18propogate a '!' when a host resolves to multiple IP addressesMike Frantzen
2002-06-18don't allow individual keep state rules to specify timeouts for 'interval' andMike Frantzen
2002-06-17only make -g available to root, by disabling setgid kmem; bunch of people okTheo de Raadt
2002-06-17A bit better. Remove debug cruft.Hakan Olsson
2002-06-16Rules must in order -> Rules must be in orderAaron Campbell
2002-06-15ecn_* policy attributes --- ok ho@Angelos D. Keromytis
2002-06-15Reset rulestate in parse_rules(), so consecutive calls (like from authpf)Daniel Hartmeier
2002-06-15Move ATA SMART defines to atactl.Grigoriy Orlov
2002-06-15Document transparent IPsec.Angelos D. Keromytis
2002-06-14spelling; from Brian Poole <raj@cerias.purdue.edu>Todd T. Fries
2002-06-14make the output of pfctl -k look nice againHenning Brauer
2002-06-14Recognize the ECN_TUNNEL attribute.Hakan Olsson
2002-06-14manpage for eui64Jun-ichiro itojun Hagino
2002-06-14add "eui64" option. from ww@styx.org. sync usage with reality.Jun-ichiro itojun Hagino
2002-06-14metric and mtu are u_long, not int.Jun-ichiro itojun Hagino
2002-06-13Fix the numbering of scrub rules. pointed out and oked by frantzen@Kjell Wooding
2002-06-12this stuff really belongs to stderr, not stdoutHenning Brauer
2002-06-12Rewrite for pf, plus some other small stuffHakan Olsson
2002-06-12Fix uninitialized access. Spotted by danh@ This is a good reason toKjell Wooding