summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2003-01-09Enable SET/ACK (ike-mode-cfg) when acting as responder. From TomasHakan Olsson
Walpuski.
2003-01-08check more strlcpy; camield@Theo de Raadt
2003-01-07Allow underscore at the beginning of strings, fixesDaniel Hartmeier
pass all user _spamd which was refused as syntax error before. Reported by Joe Nall. ok henning@
2003-01-07the "default" alias for "normal" optimization in pf_hints is dead for someHenning Brauer
time now... catched by david krause
2003-01-07Remove table name hashing (pass the name in each ioctl instead), andDaniel Hartmeier
introduce reference counting for tables, they are now automatically created and deleted through referencing rules. Diff partly from cedric@. ok mcbride@, henning@, cedric@
2003-01-06Fix some oversights with address pools for route-to/dup-to/reply-toRyan Thomas McBride
- copy key for src-hash - copy pool type (pools were being set to round-robin in all cases) + some minor knf. ok dhartmei@
2003-01-06typo: s/initalize/initializeChad Loder
2003-01-05spellingTheo de Raadt
2003-01-05don't whine about missing altq support in the kernel in the -q caseHenning Brauer
ok dhartmei@
2003-01-05err after calloc failure, not errxHenning Brauer
2003-01-05Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for tableDaniel Hartmeier
name. ok henning@, mcbride@, cedric@
2003-01-05err()/errx() do not return, errx() -> err() after calloc(), it sets errno.Daniel Hartmeier
From Andrey Matveev.
2003-01-04minor styleHenning Brauer
2003-01-04spellingTheo de Raadt
2003-01-04move noroute from flag in pf_rule_addr into type in pf_addr_wrap.Daniel Hartmeier
ok henning@, mcbride@
2003-01-04I do not know where this policy of "one .h file for every .c file" comesTheo de Raadt
from, but whoever thought of it is stupid.
2003-01-03Make good use of the 'else' keyword.Cedric Berger
2003-01-03knfTheo de Raadt
2003-01-03no need to closeTheo de Raadt
2003-01-03KNFTheo de Raadt
2003-01-03zero sockaddr before useTheo de Raadt
2003-01-03I am ready to strange the person who put a new strcpy() into ourTheo de Raadt
source tree.
2003-01-03(a && (b & c))Theo de Raadt
2003-01-03simplify ioctl accessTheo de Raadt
2003-01-03Remove _ before static functions & variables.Cedric Berger
2003-01-03Remove _ before static functions & variables.Cedric Berger
2003-01-03whitespace KNF (no, i don't touch the option inits)Daniel Hartmeier
2003-01-03kill stupid macroTheo de Raadt
2003-01-03KNFTheo de Raadt
2003-01-03Initialize hints addrinfo in a safe way.Cedric Berger
2003-01-03KNFTheo de Raadt
2003-01-03knfTheo de Raadt
2003-01-03Bring in userland code for accessing PF radix tables.Cedric Berger
ok dhartmei@ mcbride@
2003-01-02Require a direction to be specified for rules which do routing.Ryan Thomas McBride
ok dhartmei@ henning@
2003-01-01KNFHenning Brauer
2003-01-01Remove skip step for action (scrub vs. non-scrub), as scrub rules areDaniel Hartmeier
stored in a separate list now. Regress tests still pass after sed "s/ a=end / /g", other skip steps are not affected.
2003-01-01Extend two error messages, change one err() -> errx() where there's noDaniel Hartmeier
errno to translate. From Andrey Matveev.
2002-12-31Match kernel changes splitting scrub rules into their own ruleset type.Ryan Thomas McBride
ok henning@ dhartmei@
2002-12-31Prepare for the removal of amiga and sun3 platforms from the tree.Miod Vallat
There has not been enough activity and interest towards these platform to keep them lying in the tree.
2002-12-31err() doesn't return. from Andrey Matveev.Daniel Hartmeier
2002-12-30Change ipv6-icmp-type to icpm6-type. pf.conf files will need to be adjustedRyan Thomas McBride
to reflect this. ok dhartmei@ henning@
2002-12-29Make pfctl -a name -sr/-sn show all rules of all rulesets within theDaniel Hartmeier
anchor. From discussion with Michael Lucas. ok henning@
2002-12-27Since pf_norm.c looks at rule.log to see if it should log packets beingRyan Thomas McBride
dropped due to scrub violations, this adds the ability to set this in pf.conf. ok henning@
2002-12-25Honour -R/-N and don't attempt to load other rules in those cases.Daniel Hartmeier
Found by Michael Lucas.
2002-12-24print_cbq_opts should print "control" if CBQCLF_CTLCLASS is set.Ryan Thomas McBride
ok henning@
2002-12-23remove dead codeHenning Brauer
2002-12-23- mark usage() as __deadAlexander Yurchenko
- combine function call and return value checking into one statement - use errx() instead of fprintf(stderr)/exit() - style(9)ed returns - better comments - proper initializing of agt var - add usage to device_dump() - grammar - some -W -Wall fixes - add missing exit()s in usage blocks - simplify sec_getpass() function Work by Andrey Matveev <andrushock@korovino.net> and me. ok gluk@
2002-12-22Convert to using atagettrace_t.Alexander Yurchenko
ok costa@
2002-12-22Handle pool addresses in binat rules, ok mcbride@Daniel Hartmeier
2002-12-22Instead of inserting and removing rules at the top/bottom of the mainDaniel Hartmeier
ruleset, make authpf manage its rules inside anchors.