summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2002-07-30grmpf.Henning Brauer
2002-07-30allow to specify flags on all rules that include tcp.Henning Brauer
2002-07-27Typo; similates -> simulatesAaron Campbell
2002-07-26make the order of log and quick irrelevant. now bothHenning Brauer
2002-07-25prettyTheo de Raadt
2002-07-25Rename the WSDISPLAY_TYPE_SUNFFB display type into a more generic name,Miod Vallat
2002-07-23timeout_list/_spec and limit_list/_spec don't return anything -> no %type.Henning Brauer
2002-07-21fix route-to alsoTheo de Raadt
2002-07-21make the , optional in many places. This makes string concat a lot moreTheo de Raadt
2002-07-21string concat, ie.Theo de Raadt
2002-07-20minor indent tweaksTheo de Raadt
2002-07-20properly split yacc and lex useTheo de Raadt
2002-07-19minor tweaks, sighTheo de Raadt
2002-07-19And back out the last change again.Daniel Hartmeier
2002-07-19rework the interface lookup routines internals.Henning Brauer
2002-07-19Support # comments at the end of lines and inside (multi-line) stringDaniel Hartmeier
2002-07-19Use getnameinfo() instead of gethostbyaddr() to support IPv6 reverseDaniel Hartmeier
2002-07-19deal with the fact that the struct node_host ifa_pick_ip gets is not alwaysHenning Brauer
2002-07-18use inet_aton(), until this is made v6 awareTheo de Raadt
2002-07-18fix warningTheo de Raadt
2002-07-18de-lint a bit. use inet_aton(); millert okTheo de Raadt
2002-07-17support "self" as address. self expands to all IPv4 and IPv6 addresses ofHenning Brauer
2002-07-16Add nat_consistent() and rdr_consistent() for checks that should occurDaniel Hartmeier
2002-07-16fix $OpenBSD TagMarkus Friedl
2002-07-15add support forHenning Brauer
2002-07-15cosmetics/consolidations to manpage in yyerror()sPhilipp Buehler
2002-07-15o complain about keep state on block rulesHenning Brauer
2002-07-13add list expansion for interface and proto in nat rules and for proto in rdrHenning Brauer
2002-07-12Mention that an interface can be a part of at most one bridge.Jason Wright
2002-07-11malloc() failure tests; rimshot@pandora.beTheo de Raadt
2002-07-09HASH payload validation does not require an exchange.Hakan Olsson
2002-07-09check sin6_scope_id field, just in case we change the routing socket APIJun-ichiro itojun Hagino
2002-07-09getifaddrs(3) grabs link-local addrs in kernel internal form, convert themJun-ichiro itojun Hagino
2002-07-09rework the interface-to-IP routines.Henning Brauer
2002-07-08Don't allow 'flags' option in non-TCP rules, found by mpech@Daniel Hartmeier
2002-07-08make failed SIOCG80211NWKEY print alert more clearly; jolan@norm.encryptedema...Theo de Raadt
2002-07-06Remove kernel support for NTP. ok deraadt@ and tholo@Thomas Nordin
2002-07-06Security Mode feature set.Grigoriy Orlov
2002-07-05unbreak.Henning Brauer
2002-07-05another small bug I found while installing a -current pf firewall.Henning Brauer
2002-07-05allow unsetting the statusinterface viaHenning Brauer
2002-07-05volatile sig_atomic_t, suggested by Theo.Hakan Olsson
2002-07-05gcc 3.1 nits. Pointed out by David Krause.Hakan Olsson
2002-07-04Do not assume we have an active exchange during payload validation.Hakan Olsson
2002-07-04styleHakan Olsson
2002-07-03ansiTheo de Raadt
2002-07-03convert to ansi. suddenly realise that means yet another function is aTheo de Raadt
2002-07-01cut and pasto (fetch maxage correctly); Benny Holmgren <bigfoot@astrakan.hig.se>Jason Wright
2002-07-01do not Xr startkeyTheo de Raadt
2002-07-01streamline parse buffer handling (no need to copy value that is notMarc Espie