summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2003-06-26rename -h files to -h avgfpdir in synopsis to match realityTed Unangst
2003-06-25proto repairsTheo de Raadt
2003-06-25ansiTheo de Raadt
2003-06-25remove junk protosTheo de Raadt
2003-06-25allow bridge filter rules to specify a tag.Henning Brauer
if a packet matches such a rule it is tagged accordingly and pf can filter based on that tag. this allows, for example, bridge to be used as classifier for pf, and thus gives all the power of pf based on mac address filters. please note that currently the bridge filters only apply to packets which are not destined for the local host. ok deraadt@ jason@ dhartmei@
2003-06-24clarify that -u only changes the options specified on the command line;Jason McIntyre
from henning on a mailing list somewhere; ok henning@
2003-06-23Enable wicontrol build on sparc.Miod Vallat
2003-06-21add CAVEATS: disklabel only supports 15 partitions, excluding `c';Jason McIntyre
from a thread on misc@; wording, help, and ok nick@
2003-06-21fflush(stdout) in pfctl -vvsq endless output.Daniel Hartmeier
2003-06-21count packets and bidirectionally on state entries, allowing for fine-grainedDamien Miller
traffic reporting w/ pfsync; ok dhartmei@ Note: ABI change (new fields in struct pf_state), requires a rebuild of pfctl and tcpdump.
2003-06-20some cleanings recommended by lint; dhartmei okTheo de Raadt
2003-06-20Be a bit more verbose when we give up on ever seeing a response to theHakan Olsson
last message we sent out. In case we initiated the exchange, one possible and common reason is a network level problem (pf, routing, whatnot), if we're the responder, there is also the possibility we were scanned by something like ike-scan. markus@ ok.
2003-06-20use .Bk/.Ek to keep SYNOPSIS tidy;Jason McIntyre
2003-06-19knfTheo de Raadt
2003-06-19Strip the newline from the buffer when reading the tape name duringTodd C. Miller
tape change. Closes PR 3324; OK krw@
2003-06-18change expand_label_addr() to use a switch (h->addr.type) instead ofHenning Brauer
if .. else if .. else, and handle PF_ADDR_NOROUTE as well. inspired by a comment from cedric.
2003-06-18when expanding the $srcaddr/$dstaddr label macros and the address is actuallyHenning Brauer
a table refernence, don't print nonsense but the table name. found by claudio jeker, fix by me, agreement by cedric
2003-06-17Sync with share/misc/license.template and add missing DARPA creditTodd C. Miller
where applicable.
2003-06-17New driver and wsdisplay type for the Weitek Power9000 and Brooktree Bt445Miod Vallat
combination, found on the Tadpole SPARCbook 3 only (later model use the Power9100 and are already supported). Untested for lack of hardware and volunteers, but carefully crafted; if it does not work out of the box, this should be a good starting point. "worth having in the tree" millert@
2003-06-17add CAVEAT documenting dotdot behaviour;Jason McIntyre
section taken from FreeBSD manual page, diff from Otto Moerbeek.
2003-06-15ID copying should happen earlier in exchange_finalize so that we won't loseHakan Olsson
data during rekeying. From Jean-Francois Dive.
2003-06-14allocate payload_node with calloc instead of mallocHakan Olsson
2003-06-13Make "show Anchor" obey quiet flag.Cedric Berger
ok henning@
2003-06-12in set_ipmask, do not try to mask off irrelevant bits of anything butHenning Brauer
PF_ADDRMASK. due to the union this resulted in "masking" interface names in the dynaddr case... <henning@quigon:1>$ echo "pass inet from (le0)/8" | pfctl -nvf - pass inet from (l)/8 to any reported by AARON SUEN <ags137 at psu.edu> on misc@
2003-06-11ansificationTheo de Raadt
2003-06-11typoJun-ichiro itojun Hagino
2003-06-11- sync up MLD declaration with RFC3542 (s/MLD6/MLD/)Jun-ichiro itojun Hagino
- routing header declaration with RFC3542 (note: sizeof(ip6_rthdr0) has changed!) also, sync up with RFC2460 routing header definition (no "strict" source routing mode any more) part of advanced API update (RFC2292 -> 3542). markus, todd, millert, henning ok
2003-06-10o make mount(2) return EROFS, not EPERM if ffs is dirtyTodd C. Miller
o document EROFS in man page (2 possible causes) o recognize EROFS in mount_ffs and try to give a reasonable error message deraadt@ OK
2003-06-10boring cleanupsTheo de Raadt
2003-06-10Do not crash on unsupported IPSec ID types, as noted by Eric Boudrand.Hakan Olsson
2003-06-09Attempt to resolve byte order confusion in nat code once and for all.Ryan Thomas McBride
- pf_get_sport() leaves the translated port in the packet in network byte order - merge code for the p1=0 p2=0 case and static-port case in pr_get_sport() NOTE: people who use the static-port keyword in their pf.conf need to make sure pfctl is updated along with their kernel.
2003-06-08A table in an anchor creates a real anchor: pfctl -sA works.Cedric Berger
The following two pfctl functions work with an "-a" option: - pfctl [-a foo[:bar]] -sT - pfctl [-a foo[:bar]] -FT ok dhartmei@
2003-06-07print minor version as 02d; from Adam Montague via pr 3284; matches what ↵Michael Shalayeff
freebsd does as well
2003-06-07in print_host(), don't set the mask blindly to /128 but adhere to theHenning Brauer
address family. fixes the ipv4/128:port output in pfctl -ss.
2003-06-06simplify license. pfctl_altq.c with kenjiro's permission of course.Henning Brauer
2003-06-04term 3 & 4 from tholo after permissionTheo de Raadt
2003-06-04fix some more UCB term 3Theo de Raadt
2003-06-04Remove the rest of clauses 3 and 4. Approved by Niklas Hallqvist, AngelosHakan Olsson
D. Keromytis and Niels Provos.
2003-06-04Remove 3 and 4 from the "license to use"Hakan Olsson
2003-06-04sanitize a bit. ok millert@Jolan Luff
2003-06-03Remove clause 3. Approved by niklas@ and Thomas Walpuski.Hakan Olsson
2003-06-03Obsolete.Hakan Olsson
2003-06-03Remove clauses 3 and 4. Approved by markus@ and niklas@.Hakan Olsson
2003-06-03Remove clauses 3 and 4. Approved by Niklas Hallqvist and Niels Provos.Hakan Olsson
2003-06-03Remove clauses 3 and 4. Approved by Niklas Hallqvist and Niels Provos.Hakan Olsson
2003-06-03Remove clauses 3 and 4. Approved by Niklas Hallqvist and Niels Provos.Hakan Olsson
2003-06-03Remove clause 3.Hakan Olsson
2003-06-03Remove clause 3. Approved by niklas@Hakan Olsson
2003-06-03Remove clauses 3 and 4. With approval from Niklas Hallqvist andHakan Olsson
Niels Provos.
2003-06-03- section reorderJason McIntyre
- some mdoc fixes