summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2002-10-10Make wi_get_id() table driven, similar to NetBSD and FreeBSD butTodd C. Miller
2002-10-08 remove <0 checks on unsigned numbers.Vincent Labrecque
2002-10-07-Wsign-compare cleanDaniel Hartmeier
2002-10-07Two cases of const-correctness and make one global local.Daniel Hartmeier
2002-10-07set block-policy [drop|return]Henning Brauer
2002-10-07support a generic returnHenning Brauer
2002-10-07make return-icmp work for rules covering both v4 and v6Henning Brauer
2002-10-07use a new rule_flag PFRULE_RETURNICMP to decide wether to return-icmp or notHenning Brauer
2002-10-07Add 'reply-to' to filter rules, similar to route-to, but applying toDaniel Hartmeier
2002-10-06Move CHECK_ROOT into LOOP_THROUGH, gets rid of one macro and savesDaniel Hartmeier
2002-10-05Expand {} lists from left to right, so 'pass in from { a, b } to any'Daniel Hartmeier
2002-10-05Allow filtering based on IP header's tos field.Daniel Hartmeier
2002-09-29much prettier; wgriffin@jtan.comTheo de Raadt
2002-09-22little KNF: return(something) -> return (something)Henning Brauer
2002-09-22fix linenumber counting in findeol, and simplify by ignoring the \ case,Henning Brauer
2002-09-22antispoof, take 2.Henning Brauer
2002-09-18fix Xr refs; frisco@blackant.netTheo de Raadt
2002-09-17easier "self" implementation.Henning Brauer
2002-09-15set a netmask in the dynaddr caseHenning Brauer
2002-09-14oooooooopsieHenning Brauer
2002-09-14bit more clue in rdr/nat rules wrt address family examinationHenning Brauer
2002-09-14Document -R default (10000); ok deraadtPeter Valchev
2002-09-12check for calloc() failure; ho@Henning Brauer
2002-09-12antispoof [log] [quick] for [interface|interface_list] [af]Henning Brauer
2002-09-12rework netmask handling:Henning Brauer
2002-09-11signed vs unsigned from -pedantic.Hakan Olsson
2002-09-11signed vs unsigned, some void * arithmetic, from -pedantic. niklas@ ok.Hakan Olsson
2002-09-10socklen_t; cloderTheo de Raadt
2002-09-08ansi pedantic. sync w/kameJun-ichiro itojun Hagino
2002-09-08be more clueful wrt address family in nat/rdr rules.Henning Brauer
2002-09-08Fix -pedantic errors.Hakan Olsson
2002-09-06remove Xr to photurisTheo de Raadt
2002-09-06socklen_t and various other minor tweaksTheo de Raadt
2002-09-06socklen_tTheo de Raadt
2002-09-06support long names; henning okTheo de Raadt
2002-09-06assume that noone uses photurisd anymore.Theo de Raadt
2002-09-06socklen_tTheo de Raadt
2002-09-06bogus ; outside of functionTheo de Raadt
2002-09-06missing arg in a msglog(); silvio@big.net.auTheo de Raadt
2002-09-05Without IDs wait until next step/retry to handle CERTREQs. This shouldHakan Olsson
2002-09-05Do not require the presence of subjectAltName in certificates used forHakan Olsson
2002-09-05Do not create SAs for transaction exchanges either. By niklas@Hakan Olsson
2002-09-03add strlcpy/cat for BSD/OSMarkus Friedl
2002-09-03CPI_RESERVED_MIN is not defined on KAME+BSD/OS; ok ho@Markus Friedl
2002-09-03use sig_atomic_t; cloderTheo de Raadt
2002-09-02Fix parsing of port ranges in translation rules (port a:b -> port c:d).Daniel Hartmeier
2002-09-02Make sure the interface specified with route-to/dup-to/fastroute existsDaniel Hartmeier
2002-08-29need CPI_xx declsJun-ichiro itojun Hagino
2002-08-29size_t has to be casted to u_long on printing.Jun-ichiro itojun Hagino
2002-08-29Work around arguably correct OpenSSL behaviour and only ask for CRLHakan Olsson