summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2002-07-05unbreak.Henning Brauer
2002-07-05another small bug I found while installing a -current pf firewall.Henning Brauer
we don't support pass/block in on ! <interface> (at least, not yet) let the parser complain instead of ignoring the '!' ok pb@, dhartmei@
2002-07-05allow unsetting the statusinterface viaHenning Brauer
set loginterface none ok dhartmei@
2002-07-05volatile sig_atomic_t, suggested by Theo.Hakan Olsson
2002-07-05gcc 3.1 nits. Pointed out by David Krause.Hakan Olsson
2002-07-04Do not assume we have an active exchange during payload validation.Hakan Olsson
2002-07-04styleHakan Olsson
2002-07-03ansiTheo de Raadt
2002-07-03convert to ansi. suddenly realise that means yet another function is aTheo de Raadt
signal handler in some cases, and make it cope with the termination race.
2002-07-01cut and pasto (fetch maxage correctly); Benny Holmgren <bigfoot@astrakan.hig.se>Jason Wright
2002-07-01do not Xr startkeyTheo de Raadt
2002-07-01streamline parse buffer handling (no need to copy value that is notMarc Espie
going to go away). add explicit pushback buffer, to be able to push IPv6 failed parses back. handle pushback + parse buffer interactions by using negative indices. okay dhartmei@, deraadt@
2002-07-01KNFTheo de Raadt
2002-06-29ansiTheo de Raadt
2002-06-29IPPROTO_ICMP will not change in our life; itojun okTheo de Raadt
2002-06-28Don't check for address family conflicts in nat/rdr before expansion,Daniel Hartmeier
rules will expand to all valid combinations, and there's an error when none is found. Makes "nat on tun0 from 10.0.0.0/8 to any -> (tun0)" work (again).
2002-06-27fix synopsis, closes pr2775Henning Brauer
ok pb@
2002-06-27repair formatting - the new "enabled since" format is longer than the oldHenning Brauer
one and thus the field lengths need to be adjusted. ok dhartmei@, pb@
2002-06-26Missing .Xr's from Margarida Sequeira <niness@devilness.org>.Federico G. Schwindt
Remove unmount(2) per millert suggestion; millert@ ok.
2002-06-26include <bsd.own.mk> before using NOMAN; ok millert@Wilbern Cobb
2002-06-25Minor fixes, including duplicate and missing words; Brian PooleTodd C. Miller
2002-06-25move pfctl options -t, -m, -O and -l to pf.conf. These are set using theHenning Brauer
"set" keyword. example rulefile: set optimization aggressive set timeout { tcp.closing 6, tcp.opening 6 } set limit { states 1000, frags 1000 } set loginterface wi0 pass out all keep state label "$nr:$srcaddr:$srcport:$dstaddr:$dstport" block in all fries@ is working on an updated pf.conf(5) discussed at c2k2 and on icb ok dhartmei@, kjell@
2002-06-24Use interface when specified in scrub rule. No support for ! or {} yet.Daniel Hartmeier
2002-06-23uid_t and gid_t are unsignedTheo de Raadt
2002-06-22document -T option, PR#2766. ok deraadt@Jakob Schlyter
2002-06-20wi_ssid_len is in little-endian as well, so convert it. fixes ssidFederico G. Schwindt
printing on sparc64; millert@ ok.
2002-06-20Copy address family from inet/inet6 keyword, if specified.Daniel Hartmeier
2002-06-20enable wicontrol on sparc64 as well; deraadt ok.Federico G. Schwindt
2002-06-19Since we can no longer count on isprint() to tell us whether or notTodd C. Miller
a character is 7-bit ASCII, check the high bit by hand when deciding whether to print a WEP key as ASCII or hex.
2002-06-19"Enabled for Ss" -> "Enabled for D days HH:MM:SS", ok frantzen@Daniel Hartmeier
2002-06-18propogate a '!' when a host resolves to multiple IP addressesMike Frantzen
ok dhartmei@
2002-06-18don't allow individual keep state rules to specify timeouts for 'interval' andMike Frantzen
'frag' -- they aren't applied anyway ok dhartmei@ and henning@
2002-06-17only make -g available to root, by disabling setgid kmem; bunch of people okTheo de Raadt
2002-06-17A bit better. Remove debug cruft.Hakan Olsson
2002-06-16Rules must in order -> Rules must be in orderAaron Campbell
2002-06-15ecn_* policy attributes --- ok ho@Angelos D. Keromytis
2002-06-15Reset rulestate in parse_rules(), so consecutive calls (like from authpf)Daniel Hartmeier
will not fail. Reported by Chris Kuethe.
2002-06-15Move ATA SMART defines to atactl.Grigoriy Orlov
No kernel parts use this constants. From Alexander Yurchenko <grange@rt.mipt.ru>
2002-06-15Document transparent IPsec.Angelos D. Keromytis
2002-06-14spelling; from Brian Poole <raj@cerias.purdue.edu>Todd T. Fries
2002-06-14make the output of pfctl -k look nice againHenning Brauer
noticed by pb@ ok dhartmei@
2002-06-14Recognize the ECN_TUNNEL attribute.Hakan Olsson
2002-06-14manpage for eui64Jun-ichiro itojun Hagino
2002-06-14add "eui64" option. from ww@styx.org. sync usage with reality.Jun-ichiro itojun Hagino
2002-06-14metric and mtu are u_long, not int.Jun-ichiro itojun Hagino
2002-06-13Fix the numbering of scrub rules. pointed out and oked by frantzen@Kjell Wooding
2002-06-12this stuff really belongs to stderr, not stdoutHenning Brauer
pointed out by ho@ ok dhartmei@, kjell@
2002-06-12Rewrite for pf, plus some other small stuffHakan Olsson
2002-06-12Fix uninitialized access. Spotted by danh@ This is a good reason toKjell Wooding
develop with "ln -s 'J' /etc/malloc.conf" enabled. ok henning@
2002-06-12Five higher MODP groups, but commented out for now (until IANA assignsHakan Olsson
them proper numbers).
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-05 07:13:00 +0000