Age | Commit message (Collapse) | Author | |
---|---|---|---|
2003-01-09 | Enable SET/ACK (ike-mode-cfg) when acting as responder. From Tomas | Hakan Olsson | |
Walpuski. | |||
2003-01-08 | check more strlcpy; camield@ | Theo de Raadt | |
2003-01-07 | Allow underscore at the beginning of strings, fixes | Daniel Hartmeier | |
pass all user _spamd which was refused as syntax error before. Reported by Joe Nall. ok henning@ | |||
2003-01-07 | the "default" alias for "normal" optimization in pf_hints is dead for some | Henning Brauer | |
time now... catched by david krause | |||
2003-01-07 | Remove table name hashing (pass the name in each ioctl instead), and | Daniel Hartmeier | |
introduce reference counting for tables, they are now automatically created and deleted through referencing rules. Diff partly from cedric@. ok mcbride@, henning@, cedric@ | |||
2003-01-06 | Fix some oversights with address pools for route-to/dup-to/reply-to | Ryan Thomas McBride | |
- copy key for src-hash - copy pool type (pools were being set to round-robin in all cases) + some minor knf. ok dhartmei@ | |||
2003-01-06 | typo: s/initalize/initialize | Chad Loder | |
2003-01-05 | spelling | Theo de Raadt | |
2003-01-05 | don't whine about missing altq support in the kernel in the -q case | Henning Brauer | |
ok dhartmei@ | |||
2003-01-05 | err after calloc failure, not errx | Henning Brauer | |
2003-01-05 | Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for table | Daniel Hartmeier | |
name. ok henning@, mcbride@, cedric@ | |||
2003-01-05 | err()/errx() do not return, errx() -> err() after calloc(), it sets errno. | Daniel Hartmeier | |
From Andrey Matveev. | |||
2003-01-04 | minor style | Henning Brauer | |
2003-01-04 | spelling | Theo de Raadt | |
2003-01-04 | move noroute from flag in pf_rule_addr into type in pf_addr_wrap. | Daniel Hartmeier | |
ok henning@, mcbride@ | |||
2003-01-04 | I do not know where this policy of "one .h file for every .c file" comes | Theo de Raadt | |
from, but whoever thought of it is stupid. | |||
2003-01-03 | Make good use of the 'else' keyword. | Cedric Berger | |
2003-01-03 | knf | Theo de Raadt | |
2003-01-03 | no need to close | Theo de Raadt | |
2003-01-03 | KNF | Theo de Raadt | |
2003-01-03 | zero sockaddr before use | Theo de Raadt | |
2003-01-03 | I am ready to strange the person who put a new strcpy() into our | Theo de Raadt | |
source tree. | |||
2003-01-03 | (a && (b & c)) | Theo de Raadt | |
2003-01-03 | simplify ioctl access | Theo de Raadt | |
2003-01-03 | Remove _ before static functions & variables. | Cedric Berger | |
2003-01-03 | Remove _ before static functions & variables. | Cedric Berger | |
2003-01-03 | whitespace KNF (no, i don't touch the option inits) | Daniel Hartmeier | |
2003-01-03 | kill stupid macro | Theo de Raadt | |
2003-01-03 | KNF | Theo de Raadt | |
2003-01-03 | Initialize hints addrinfo in a safe way. | Cedric Berger | |
2003-01-03 | KNF | Theo de Raadt | |
2003-01-03 | knf | Theo de Raadt | |
2003-01-03 | Bring in userland code for accessing PF radix tables. | Cedric Berger | |
ok dhartmei@ mcbride@ | |||
2003-01-02 | Require a direction to be specified for rules which do routing. | Ryan Thomas McBride | |
ok dhartmei@ henning@ | |||
2003-01-01 | KNF | Henning Brauer | |
2003-01-01 | Remove skip step for action (scrub vs. non-scrub), as scrub rules are | Daniel Hartmeier | |
stored in a separate list now. Regress tests still pass after sed "s/ a=end / /g", other skip steps are not affected. | |||
2003-01-01 | Extend two error messages, change one err() -> errx() where there's no | Daniel Hartmeier | |
errno to translate. From Andrey Matveev. | |||
2002-12-31 | Match kernel changes splitting scrub rules into their own ruleset type. | Ryan Thomas McBride | |
ok henning@ dhartmei@ | |||
2002-12-31 | Prepare for the removal of amiga and sun3 platforms from the tree. | Miod Vallat | |
There has not been enough activity and interest towards these platform to keep them lying in the tree. | |||
2002-12-31 | err() doesn't return. from Andrey Matveev. | Daniel Hartmeier | |
2002-12-30 | Change ipv6-icmp-type to icpm6-type. pf.conf files will need to be adjusted | Ryan Thomas McBride | |
to reflect this. ok dhartmei@ henning@ | |||
2002-12-29 | Make pfctl -a name -sr/-sn show all rules of all rulesets within the | Daniel Hartmeier | |
anchor. From discussion with Michael Lucas. ok henning@ | |||
2002-12-27 | Since pf_norm.c looks at rule.log to see if it should log packets being | Ryan Thomas McBride | |
dropped due to scrub violations, this adds the ability to set this in pf.conf. ok henning@ | |||
2002-12-25 | Honour -R/-N and don't attempt to load other rules in those cases. | Daniel Hartmeier | |
Found by Michael Lucas. | |||
2002-12-24 | print_cbq_opts should print "control" if CBQCLF_CTLCLASS is set. | Ryan Thomas McBride | |
ok henning@ | |||
2002-12-23 | remove dead code | Henning Brauer | |
2002-12-23 | - mark usage() as __dead | Alexander Yurchenko | |
- combine function call and return value checking into one statement - use errx() instead of fprintf(stderr)/exit() - style(9)ed returns - better comments - proper initializing of agt var - add usage to device_dump() - grammar - some -W -Wall fixes - add missing exit()s in usage blocks - simplify sec_getpass() function Work by Andrey Matveev <andrushock@korovino.net> and me. ok gluk@ | |||
2002-12-22 | Convert to using atagettrace_t. | Alexander Yurchenko | |
ok costa@ | |||
2002-12-22 | Handle pool addresses in binat rules, ok mcbride@ | Daniel Hartmeier | |
2002-12-22 | Instead of inserting and removing rules at the top/bottom of the main | Daniel Hartmeier | |
ruleset, make authpf manage its rules inside anchors. |