summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2003-11-22daniel stumbled over a broken regress test, and it turned out that I forgotHenning Brauer
to commit a diff from 11/6... do not insert the "block in on ! interface" rule for antispoof statements when the interface in question does not have any IP address, because that then expands to block in on ! interface all which is obviously bad. niklas@ found it, dhartmei@ ok, and I think some more ppl ok I don't remember
2003-11-21- standard SYNOPSISJason McIntyre
- sort OPTIONS - s/Dq/Sq when quoting single characters - sync usage() - simplify macros
2003-11-20remove -Werror from userland builds, to give us a chance toAnil Madhavapeddy
use more verbose warning options if desired. ok millert@, henning@, david@
2003-11-20use .Dv for AF_INET and AF_INET6 (kills ugly line break);Jason McIntyre
spotted by Alexey E. Suslikov; also kill some .Pp's before displays/lists for better PostScript output;
2003-11-16__attribute__((__packed__)) -> __packedAnil Madhavapeddy
2003-11-15fix savecore on big endian 64 bit arches. OK millert@Marco S Hyman
2003-11-15no dup header sys/types.h. from Andrey MatveevTed Unangst
2003-11-14in print_status:Henning Brauer
-print debuglevel "Loud", this was omitted before (catched by mpech@) -use the fine PF_DEBUG_* defines instead of magic numbers ok markus
2003-11-14allow the debuglevel to be set from pf.conf (set debug)Henning Brauer
ok cedric@
2003-11-09Unbreak printing of vlan interface information, commented out accidentallyRyan Thomas McBride
in CARP import.
2003-11-08typos from Jonathon Gray;Jason McIntyre
2003-11-08Add 'no-sync' state option to prevent state transition messages for statesRyan Thomas McBride
created by this rule from appearing on the pfsync(4) interface. e.g. pass in proto tcp to self flags S/SA keep state (no-sync) ok cedric@ henning@ dhartmei@
2003-11-07adress -> address, and a few more; all from Jonathon Gray;Jason McIntyre
(mvme68k/mvme88k) vs.c and (vax) if_le.c ok miod@ isakmpd ones ok ho@
2003-11-07- document /etc/kbdtypeJason McIntyre
- sort options list and FILES - put example descriptions before examples and indent them ok mickey@
2003-11-06Style nits.Hakan Olsson
2003-11-06Require encrypted messages are soon as we have the keystate for it.Hakan Olsson
Require DELETE payloads to be accompanied by HASHes, and add validation for HASH payloads without active exchanges. From Hans-Joerg Hoexer with various modifications and suggestions from me and markus@. Ok markus@.
2003-11-06spis[] type tweak. From Hans-Joerg Hoexer.Hakan Olsson
2003-11-06two more KNF violations I missed earlier. who introduces those all the time?Henning Brauer
2003-11-06and fix two err() that should be errx() while beeing hereHenning Brauer
2003-11-06need calloc hereHenning Brauer
2003-11-06KNFHenning Brauer
2003-11-06allow the label macros to be used in tags as well.Henning Brauer
the idea is not mine and I'dlove to get credit, but I cannot find the mail any more :-(( ok canacar@ dhartmei@
2003-11-06don't write magic until the file system is really done. preventsTed Unangst
fsck/mount unhappiness. hint from freebsd-arch ml. ok deraadt@
2003-11-05PFS: Perfect Forward Secrecy (RFC 2409);Jason McIntyre
from misc@ and ok markus@
2003-11-05updated URL from Jared Yanovich;Jason McIntyre
2003-11-05updated URL from Jared Yanovich;Jason McIntyre
2003-11-03NULL for NULL pointers, not 0Ted Unangst
2003-11-03combine ugly printf(), exit() combo statements into err() or errx().Ted Unangst
mostly from tom cosgrove.
2003-10-31New libedit api changes.Otto Moerbeek
Tested by djm@, mouring@, jmc@. ok deraadt@
2003-10-31These should build on pegasosDale Rahn
2003-10-30malloc failures in init? never. but try to be reasonable for one dumb oneTheo de Raadt
2003-10-28better partition finding. instead of groveling around looking forTed Unangst
a device, and then trying to guess what partition it is, use opendev(), fstat(), and DISKPART() to know what what's going on. most of the diff from Tom Cosgrove <tom.cosgrove at arches-consulting.com>
2003-10-26fix partition selection to allow all partitions to be grown.Ted Unangst
report by Mitja Muzenic <mitja at muzenic.net>
2003-10-26"advbase" is the correct operand.Ryan Thomas McBride
diff from Daniel Cavanagh <nofsk@vtown.com.au>
2003-10-25OpenSSL generates DNs with emailAddress, not Email.Ryan Thomas McBride
2003-10-25receiveing -> receiving; from Jared Yanovich;Jason McIntyre
2003-10-25adddress -> address; from Jared Yanovich;Jason McIntyre
2003-10-25controlls -> controls; from Jared Yanovich;Jason McIntyre
2003-10-22spacingTheo de Raadt
2003-10-22use setgroups too; canacar okTheo de Raadt
2003-10-22caution with killTheo de Raadt
2003-10-22privilege seperated pflogdCan Erkin Acar
_pflogd user and group must be created for proper operation. ok frantzen@ henning@ mcbride@ deraadt@
2003-10-21don't use NULL as (int)0. henning okJun-ichiro itojun Hagino
2003-10-19Remove commented out debug line committed by mistake.Ryan Thomas McBride
2003-10-18sync with usage();Jason McIntyre
2003-10-18new sentence, new line;Jason McIntyre
2003-10-18quote a macro's args to make it expand correctly;Jason McIntyre
2003-10-18CARP documentation cleanups, mostly from jmc@Ryan Thomas McBride
2003-10-17Common Address Redundancy ProtocolRyan Thomas McBride
Allows multiple hosts to share an IP address, providing high availability and load balancing. Based on code by mickey@, with additional help from markus@ and Marco_Pfatschbacher@genua.de ok deraadt@
2003-10-17slight options reorder; from NetBSDJason McIntyre