Age | Commit message (Collapse) | Author | |
---|---|---|---|
2003-06-25 | proto repairs | Theo de Raadt | |
2003-06-25 | ansi | Theo de Raadt | |
2003-06-25 | remove junk protos | Theo de Raadt | |
2003-06-25 | allow bridge filter rules to specify a tag. | Henning Brauer | |
if a packet matches such a rule it is tagged accordingly and pf can filter based on that tag. this allows, for example, bridge to be used as classifier for pf, and thus gives all the power of pf based on mac address filters. please note that currently the bridge filters only apply to packets which are not destined for the local host. ok deraadt@ jason@ dhartmei@ | |||
2003-06-24 | clarify that -u only changes the options specified on the command line; | Jason McIntyre | |
from henning on a mailing list somewhere; ok henning@ | |||
2003-06-23 | Enable wicontrol build on sparc. | Miod Vallat | |
2003-06-21 | add CAVEATS: disklabel only supports 15 partitions, excluding `c'; | Jason McIntyre | |
from a thread on misc@; wording, help, and ok nick@ | |||
2003-06-21 | fflush(stdout) in pfctl -vvsq endless output. | Daniel Hartmeier | |
2003-06-21 | count packets and bidirectionally on state entries, allowing for fine-grained | Damien Miller | |
traffic reporting w/ pfsync; ok dhartmei@ Note: ABI change (new fields in struct pf_state), requires a rebuild of pfctl and tcpdump. | |||
2003-06-20 | some cleanings recommended by lint; dhartmei ok | Theo de Raadt | |
2003-06-20 | Be a bit more verbose when we give up on ever seeing a response to the | Hakan Olsson | |
last message we sent out. In case we initiated the exchange, one possible and common reason is a network level problem (pf, routing, whatnot), if we're the responder, there is also the possibility we were scanned by something like ike-scan. markus@ ok. | |||
2003-06-20 | use .Bk/.Ek to keep SYNOPSIS tidy; | Jason McIntyre | |
2003-06-19 | knf | Theo de Raadt | |
2003-06-19 | Strip the newline from the buffer when reading the tape name during | Todd C. Miller | |
tape change. Closes PR 3324; OK krw@ | |||
2003-06-18 | change expand_label_addr() to use a switch (h->addr.type) instead of | Henning Brauer | |
if .. else if .. else, and handle PF_ADDR_NOROUTE as well. inspired by a comment from cedric. | |||
2003-06-18 | when expanding the $srcaddr/$dstaddr label macros and the address is actually | Henning Brauer | |
a table refernence, don't print nonsense but the table name. found by claudio jeker, fix by me, agreement by cedric | |||
2003-06-17 | Sync with share/misc/license.template and add missing DARPA credit | Todd C. Miller | |
where applicable. | |||
2003-06-17 | New driver and wsdisplay type for the Weitek Power9000 and Brooktree Bt445 | Miod Vallat | |
combination, found on the Tadpole SPARCbook 3 only (later model use the Power9100 and are already supported). Untested for lack of hardware and volunteers, but carefully crafted; if it does not work out of the box, this should be a good starting point. "worth having in the tree" millert@ | |||
2003-06-17 | add CAVEAT documenting dotdot behaviour; | Jason McIntyre | |
section taken from FreeBSD manual page, diff from Otto Moerbeek. | |||
2003-06-15 | ID copying should happen earlier in exchange_finalize so that we won't lose | Hakan Olsson | |
data during rekeying. From Jean-Francois Dive. | |||
2003-06-14 | allocate payload_node with calloc instead of malloc | Hakan Olsson | |
2003-06-13 | Make "show Anchor" obey quiet flag. | Cedric Berger | |
ok henning@ | |||
2003-06-12 | in set_ipmask, do not try to mask off irrelevant bits of anything but | Henning Brauer | |
PF_ADDRMASK. due to the union this resulted in "masking" interface names in the dynaddr case... <henning@quigon:1>$ echo "pass inet from (le0)/8" | pfctl -nvf - pass inet from (l)/8 to any reported by AARON SUEN <ags137 at psu.edu> on misc@ | |||
2003-06-11 | ansification | Theo de Raadt | |
2003-06-11 | typo | Jun-ichiro itojun Hagino | |
2003-06-11 | - sync up MLD declaration with RFC3542 (s/MLD6/MLD/) | Jun-ichiro itojun Hagino | |
- routing header declaration with RFC3542 (note: sizeof(ip6_rthdr0) has changed!) also, sync up with RFC2460 routing header definition (no "strict" source routing mode any more) part of advanced API update (RFC2292 -> 3542). markus, todd, millert, henning ok | |||
2003-06-10 | o make mount(2) return EROFS, not EPERM if ffs is dirty | Todd C. Miller | |
o document EROFS in man page (2 possible causes) o recognize EROFS in mount_ffs and try to give a reasonable error message deraadt@ OK | |||
2003-06-10 | boring cleanups | Theo de Raadt | |
2003-06-10 | Do not crash on unsupported IPSec ID types, as noted by Eric Boudrand. | Hakan Olsson | |
2003-06-09 | Attempt to resolve byte order confusion in nat code once and for all. | Ryan Thomas McBride | |
- pf_get_sport() leaves the translated port in the packet in network byte order - merge code for the p1=0 p2=0 case and static-port case in pr_get_sport() NOTE: people who use the static-port keyword in their pf.conf need to make sure pfctl is updated along with their kernel. | |||
2003-06-08 | A table in an anchor creates a real anchor: pfctl -sA works. | Cedric Berger | |
The following two pfctl functions work with an "-a" option: - pfctl [-a foo[:bar]] -sT - pfctl [-a foo[:bar]] -FT ok dhartmei@ | |||
2003-06-07 | print minor version as 02d; from Adam Montague via pr 3284; matches what ↵ | Michael Shalayeff | |
freebsd does as well | |||
2003-06-07 | in print_host(), don't set the mask blindly to /128 but adhere to the | Henning Brauer | |
address family. fixes the ipv4/128:port output in pfctl -ss. | |||
2003-06-06 | simplify license. pfctl_altq.c with kenjiro's permission of course. | Henning Brauer | |
2003-06-04 | term 3 & 4 from tholo after permission | Theo de Raadt | |
2003-06-04 | fix some more UCB term 3 | Theo de Raadt | |
2003-06-04 | Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, Angelos | Hakan Olsson | |
D. Keromytis and Niels Provos. | |||
2003-06-04 | Remove 3 and 4 from the "license to use" | Hakan Olsson | |
2003-06-04 | sanitize a bit. ok millert@ | Jolan Luff | |
2003-06-03 | Remove clause 3. Approved by niklas@ and Thomas Walpuski. | Hakan Olsson | |
2003-06-03 | Obsolete. | Hakan Olsson | |
2003-06-03 | Remove clauses 3 and 4. Approved by markus@ and niklas@. | Hakan Olsson | |
2003-06-03 | Remove clauses 3 and 4. Approved by Niklas Hallqvist and Niels Provos. | Hakan Olsson | |
2003-06-03 | Remove clauses 3 and 4. Approved by Niklas Hallqvist and Niels Provos. | Hakan Olsson | |
2003-06-03 | Remove clauses 3 and 4. Approved by Niklas Hallqvist and Niels Provos. | Hakan Olsson | |
2003-06-03 | Remove clause 3. | Hakan Olsson | |
2003-06-03 | Remove clause 3. Approved by niklas@ | Hakan Olsson | |
2003-06-03 | Remove clauses 3 and 4. With approval from Niklas Hallqvist and | Hakan Olsson | |
Niels Provos. | |||
2003-06-03 | - section reorder | Jason McIntyre | |
- some mdoc fixes | |||
2003-06-03 | Cleanup. Use 'sizeof variable' instead of magic constants. | Hakan Olsson | |