summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2005-06-14Kill whiteout support. OK deraadt@ and beck@Todd C. Miller
2005-06-14no need to restrict tagging to stateful rules any more, dhartmei okHenning Brauer
From: "Alexey E. Suslikov" <cruel@texnika.com.ua>
2005-06-14do not confuse bytes with bits, noted by marcus.popp at paranoidbsd.orgHans-Joerg Hoexer
2005-06-14add ENCAP_UDP_{TUNNEL,TRANSPORT} types according to rfc 3947Hans-Joerg Hoexer
ok markus
2005-06-14use "egress" instead of "external" for the interface group containing theHenning Brauer
interfaces the default route(s) point to, proposed deraadt some days ago, ok djm deraadt
2005-06-13document extended pfctl -sl formatHenning Brauer
2005-06-13make the packet and byte counters on rules and src nodes per direction,Henning Brauer
matches the counters on states now. also fix the counting on scrub rules where we previously did not handle the byte counters at all. extend pfctl -sl output to include the new seperate in/out counters hacked on the ferry from Earls Cove to Saltery Bay ok ryan
2005-06-13free memory in show_src_nodes and show_states, as reported byJared Yanovich
Henrik Gustafsson <openbsd@fnord.se> via tech@. ok henning
2005-06-13Allow isakmpd to write a pid file when /var is a subdir (e.g. /usr/var)Todd C. Miller
and not a mount point.
2005-06-12let 'ifconfig <group>' work, displaying all the interfaces which are memberHenning Brauer
of the given group, markus ok
2005-06-11grammar;Jason McIntyre
2005-06-10add Xr to mount_udf(8);Jason McIntyre
2005-06-09note that nwid and essid are synonymous;Jason McIntyre
from walter goulet and clarified by reyk@
2005-06-09print the interface address on route get; ok henning, claudioMarkus Friedl
2005-06-08netns crap i missed earlier... damn unreliable toolsHenning Brauer
2005-06-07move description of the default groups to the ifconfog manpageHenning Brauer
netintro should only give an intro, not the glory details :) theo ok
2005-06-07don't include ccitt headers (were not used anyway)Henning Brauer
2005-06-06parse local/remote credential payload types.Hans-Joerg Hoexer
2005-06-06get rid of another leftover from the src routing adventureHenning Brauer
2005-06-04undo last commit, all memory is already freed by udp_remove()Hans-Joerg Hoexer
ok cloder
2005-06-04Clarify that for -i/-R only paths beginning with /var/run are valid.Hans-Joerg Hoexer
2005-06-02unbreak port floating, noticed by sean at obstacle9 dot comHans-Joerg Hoexer
ok cloder
2005-06-02Make buf_add a no-op if length == 0. OK henningChad Loder
2005-06-02expand the section on pki:Jason McIntyre
- list different methods available - document key-based method - move x509-based into its own section - add keynote stub section ok hshoexer@
2005-06-01Fix memory leak. OK hshoexerChad Loder
2005-06-01Fix memory leaks. OK hshoexerChad Loder
2005-06-01This file is outdated, everything needed for setting up PKI is in the man pagesHans-Joerg Hoexer
now. noticed by david@ ok ho markus
2005-06-01snprintf returns an int, not a size_t. OK deraadt@Chad Loder
2005-05-31grammar;Jason McIntyre
2005-05-31tidy up the trunk stuff;Jason McIntyre
2005-05-31fix a typo, touch-pannel -> touch-panelBrad Smith
From: Chris Kuethe via PR 4232
2005-05-31certpatch is gone, noticed by david@Hans-Joerg Hoexer
2005-05-29robustness against malformed snames.marius eriksen
ok henning@
2005-05-28ooopsHans-Joerg Hoexer
2005-05-28Remove current state code, it's bogus. We'll redo this.Hans-Joerg Hoexer
suggested by and ok moritz
2005-05-28do sanity checking on directoy entries. ok hshoexer@Moritz Jodeit
2005-05-28Cleanup sample configurations a bit; more AES, less MD5, remove fields weHakan Olsson
no longer require etc. Also add a 9-line "default" config sample.
2005-05-28introduce new readdir implementation for the monitor.Moritz Jodeit
testing and ok hshoexer@
2005-05-28make path checking in the monitor a lot easier. ok hshoexer@Moritz Jodeit
2005-05-28don't print the "[ Inserted: uid pid ]" line when -g is used, so theDaniel Hartmeier
regress tests don't have to deal with it (and it's a useless thing to check from there).
2005-05-27Use rtm_fmask instead of rtm_useRyan Thomas McBride
ok marius@ claudio@
2005-05-27Hide Hostid and Checksum in pfctl -si output unless the -v flag is used.Ryan Thomas McBride
Prodded by henning@
2005-05-27Calculate an MD5 checksum over the main pf ruleset.Marco Pfatschbacher
This is the basis for further pfsync improvements, to ensure that pf rules are in sync with the master. "get it in" mcbride@
2005-05-27Make monitor.c use unsigned lengths in messages. Makes this compileChad Loder
with -Wsign-compare. OK and a little testing by hshoexer, OK moritz Now it's anil's turn to do some of this somewhere else
2005-05-27filtering on ruleset name is already implemented, document it.Daniel Hartmeier
2005-05-27show flow type (require, use, etc.)Hans-Joerg Hoexer
2005-05-27Additional paranoia. OK hshoexerChad Loder
2005-05-27Use SADB_SATYPE_* instead of IPPROTO_*Hans-Joerg Hoexer
2005-05-27get rid of 'log-all'. now that we have 'log (options)', make 'all' anDaniel Hartmeier
option to log. so, 'log-all' becomes 'log (all)'.
2005-05-27get rid of shift/reduce conflicts, don't support empty logoptsDaniel Hartmeier