summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2002-07-19And back out the last change again.Daniel Hartmeier
2002-07-19rework the interface lookup routines internals.Henning Brauer
2002-07-19Support # comments at the end of lines and inside (multi-line) stringDaniel Hartmeier
2002-07-19Use getnameinfo() instead of gethostbyaddr() to support IPv6 reverseDaniel Hartmeier
2002-07-19deal with the fact that the struct node_host ifa_pick_ip gets is not alwaysHenning Brauer
2002-07-18use inet_aton(), until this is made v6 awareTheo de Raadt
2002-07-18fix warningTheo de Raadt
2002-07-18de-lint a bit. use inet_aton(); millert okTheo de Raadt
2002-07-17support "self" as address. self expands to all IPv4 and IPv6 addresses ofHenning Brauer
2002-07-16Add nat_consistent() and rdr_consistent() for checks that should occurDaniel Hartmeier
2002-07-16fix $OpenBSD TagMarkus Friedl
2002-07-15add support forHenning Brauer
2002-07-15cosmetics/consolidations to manpage in yyerror()sPhilipp Buehler
2002-07-15o complain about keep state on block rulesHenning Brauer
2002-07-13add list expansion for interface and proto in nat rules and for proto in rdrHenning Brauer
2002-07-12Mention that an interface can be a part of at most one bridge.Jason Wright
2002-07-11malloc() failure tests; rimshot@pandora.beTheo de Raadt
2002-07-09HASH payload validation does not require an exchange.Hakan Olsson
2002-07-09check sin6_scope_id field, just in case we change the routing socket APIJun-ichiro itojun Hagino
2002-07-09getifaddrs(3) grabs link-local addrs in kernel internal form, convert themJun-ichiro itojun Hagino
2002-07-09rework the interface-to-IP routines.Henning Brauer
2002-07-08Don't allow 'flags' option in non-TCP rules, found by mpech@Daniel Hartmeier
2002-07-08make failed SIOCG80211NWKEY print alert more clearly; jolan@norm.encryptedema...Theo de Raadt
2002-07-06Remove kernel support for NTP. ok deraadt@ and tholo@Thomas Nordin
2002-07-06Security Mode feature set.Grigoriy Orlov
2002-07-05unbreak.Henning Brauer
2002-07-05another small bug I found while installing a -current pf firewall.Henning Brauer
2002-07-05allow unsetting the statusinterface viaHenning Brauer
2002-07-05volatile sig_atomic_t, suggested by Theo.Hakan Olsson
2002-07-05gcc 3.1 nits. Pointed out by David Krause.Hakan Olsson
2002-07-04Do not assume we have an active exchange during payload validation.Hakan Olsson
2002-07-04styleHakan Olsson
2002-07-03ansiTheo de Raadt
2002-07-03convert to ansi. suddenly realise that means yet another function is aTheo de Raadt
2002-07-01cut and pasto (fetch maxage correctly); Benny Holmgren <bigfoot@astrakan.hig.se>Jason Wright
2002-07-01do not Xr startkeyTheo de Raadt
2002-07-01streamline parse buffer handling (no need to copy value that is notMarc Espie
2002-07-01KNFTheo de Raadt
2002-06-29ansiTheo de Raadt
2002-06-29IPPROTO_ICMP will not change in our life; itojun okTheo de Raadt
2002-06-28Don't check for address family conflicts in nat/rdr before expansion,Daniel Hartmeier
2002-06-27fix synopsis, closes pr2775Henning Brauer
2002-06-27repair formatting - the new "enabled since" format is longer than the oldHenning Brauer
2002-06-26Missing .Xr's from Margarida Sequeira <niness@devilness.org>.Federico G. Schwindt
2002-06-26include <bsd.own.mk> before using NOMAN; ok millert@Wilbern Cobb
2002-06-25Minor fixes, including duplicate and missing words; Brian PooleTodd C. Miller
2002-06-25move pfctl options -t, -m, -O and -l to pf.conf. These are set using theHenning Brauer
2002-06-24Use interface when specified in scrub rule. No support for ! or {} yet.Daniel Hartmeier
2002-06-23uid_t and gid_t are unsignedTheo de Raadt
2002-06-22document -T option, PR#2766. ok deraadt@Jakob Schlyter
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-11 18:59:26 +0000