summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2002-11-21Add 'rawkey' to FEATURES.Hakan Olsson
2002-11-21-Wshadow nits.Hakan Olsson
2002-11-21hmac_init and prf_alloc should use unsigned lengths. Problem pointed out by ↵Hakan Olsson
Patrick Latifi.
2002-11-20wow, a format string bug in a Makefile. Not surprised we missed thisTheo de Raadt
one; peterw@ifost.org.au
2002-11-20document the relevant queue optionsPhilipp Buehler
henning@ ok
2002-11-19minor cosmetics, space after "label %s", in case both label and queue areDaniel Hartmeier
specified.
2002-11-19only take cbq opts from schedtype if type=CBQHenning Brauer
2002-11-19pfctl -sq prettierHenning Brauer
2002-11-19altq ifspec is always level 0Henning Brauer
2002-11-19altq interface spec should be printed as altq interface spec, not queueHenning Brauer
2002-11-19repair queuespec syntax glitch, theo agreesHenning Brauer
2002-11-19default priority is 1, not 0Henning Brauer
found by pb@
2002-11-19- match 'Gb' case-sensitivelyCamiel Dobbelaar
- match "%" unit only, not "%crap" ok henning@
2002-11-19icmp-type was off by one, ok henning@Peter Stromberg
2002-11-18no; do not use };Theo de Raadt
2002-11-18more using strl* return values instead of strlen callsHenning Brauer
2002-11-18easier "queue name too long" detection; from theoHenning Brauer
2002-11-18support Gb in print; henning okTheo de Raadt
2002-11-18KNFTheo de Raadt
2002-11-18KNFTheo de Raadt
2002-11-18altq and pf mergedHenning Brauer
this isn't 100% done yet: the print_ stuff isn't finished, some features will be added later, and there is no documetation yet, but committing now enables a few more people to work on. print_altq_node stuff hacked by Daniel at euroBSDcon; lotsa stuff from kjc, debugging help also pb and camiel. lots of good ideas by theo. "commit now" theo philipp daniel
2002-11-18fix a typo and earn a minor style point; Michael KnudsenTodd C. Miller
2002-11-15Missing "Configuration" tag in a Phase-1 peer was not handled correctly,Hakan Olsson
pointed out by Aref Taidi. Replace this with a "Default-Phase-1-Configuration" that will be used if this tag is missing from the peer. Update manpage accordingly. niklas@ ok.
2002-11-14Use %d instead of %2d for better matching. From Mike Neuman. Fixes PR#2848.Hakan Olsson
2002-11-14Better whitespace/newline handling, this should make broken lines andHakan Olsson
multiple values parse correctly again, as well as fix PR#2974. Also fix some int/u_int mismatches, and remove conf_get_line() (obsolete).
2002-11-14use $ or # before commands in examplesTheo de Raadt
2002-11-14correct IPv6 setsockopt for ipsec operation. angelos okJun-ichiro itojun Hagino
From: Martti Kuparinen <martti.kuparinen@iki.fi>
2002-11-13as scrub rules end up in a struct pf_rule just call expand_rule instead ofHenning Brauer
handcrufting this. has quite a few positive side effects: -interface list expansion works (fries@ asked for that) -can specify address family, very helpful with dynamic interface expansion (pointed out by daniel) -src/dst ip/port list expansion works -fixes a long standing, scary, though never noticed bug: scrub out on lo1 from any to 10.0.0.1 expanded to scrub out on lo1 all ... this bug was there from day #1. "sneaky diff of the month award" dhartmei@
2002-11-13Add label macro $if, as we support {} list expansion for interfaces now.Daniel Hartmeier
From David Gwynne. ok henning@, camield@
2002-11-13Initialize tail pointer to node, found by fries@Daniel Hartmeier
2002-11-10fix SEE ALSO; ho ok.Federico G. Schwindt
2002-11-09remove references to unexistent manpages; miod ok.Federico G. Schwindt
2002-11-09more SEE ALSO fixes.Federico G. Schwindt
2002-11-09second round to SEE ALSO fixes.Federico G. Schwindt
2002-11-09SEE ALSO reordering and corrections.Federico G. Schwindt
2002-11-08a missing next kbd typeMichael Shalayeff
2002-11-08init buf to NULL just in case...Henning Brauer
there isn't a single codepath where it can remain uninitialized, but this might prevent a stupid bug if we change something later
2002-11-08I missed a 'return' statement. Also spotted by Aref Taidi. Thanks.Hakan Olsson
2002-11-07move the ifa_exists block a bit up in host()Henning Brauer
inspired by mpech@ pointing out a missing free(buf). so handle the it-is-an-interface case where we don't need the buf before allocating memory.
2002-11-06More careful will alloc/free. Spotted by Aref Taidi.Hakan Olsson
2002-11-06- make -u identical with "-o update". The same for -f,-r,-w.Grigoriy Orlov
- mount point may be specified with trailing slash in all cases (including fstab). - mount doesn't look in fstab at "-o update". So update doesn't fails for fs which isn't listed in fstab. - 'mount -o update' only changes options which supplied via command line and preserves options which currently in use. - fix argv[] buffer overflow in mountfs/mangle. - correct usage. - Other improvements and fixes which I can't remember. Thanks to everyone who test this patch. miod@ ok.
2002-11-04welcome to CIDR world, pfctl!Henning Brauer
use inet_net_pton to parse IP adresses. stuff like block in from 10/8 to any works now. some input camield@ and dhartmei@ ok dhartmei@, camield@, mcbride@
2002-11-02%i -> %d, matches the style of existing code, from millert@Daniel Hartmeier
2002-11-02printf int with %i, not %u. from pilot@monkey.org.Daniel Hartmeier
2002-10-30simplifyHenning Brauer
2002-10-30fix interface expansion. since the reversed list expansion code wasHenning Brauer
committed this was broken, only the first IP address was returned. pointed out by danh@, who sent an excellent bug report. ok dhartmei@
2002-10-29introduceHenning Brauer
set require-order [yes|no] default is yes. with set to "no", it isn't required to have the rules in order (options, scrub, nat, filter) any more, though of course NATing still happens before filtering and so on, so one has to take care. ok camield@ mcbride@ dhartmei@ idea discussed with a whole lotta more people and basically ok for everyone ;-)
2002-10-27Add an option to use software WEP now that we have a software decryptTodd C. Miller
function. Can be useful for cards that only support 40-bit WEP or where the card firmware lacks weak IVs avoidance. Prism/Symbol only. In the future this will be expanded to support proposed WEP replacements. Based on code from Jamison Adcock.
2002-10-27remove the "flags X" syntax.Henning Brauer
noone who wrote "flags S" meant that, but actually something like "flags S/SA". with "flags S" changing its actual meaning as more flags got supported, things got worse. ok dhartmei@, pb@
2002-10-26use poll(2). sync w/kameJun-ichiro itojun Hagino
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-29 11:48:13 +0000