summaryrefslogtreecommitdiff
path: root/share/man/man5/pf.conf.5
AgeCommit message (Expand)Author
2006-07-09The timeout value is called src.track, not source-track.Ryan Thomas McBride
2006-06-18typo: queu -> queueHans-Joerg Hoexer
2006-05-28put previous in the correct place; ok mcbrideJason McIntyre
2006-05-28Adaptive timeouts are now on by default.Ryan Thomas McBride
2006-05-14interface bandwidths can change; ok henningTheo de Raadt
2006-05-01update the "tagged" line; ok dhartmeiJason McIntyre
2006-05-01add support for "tagged {}" lists, from Pierre-Yves RitschardDaniel Hartmeier
2006-04-30- replace <> with .AqJason McIntyre
2006-03-14implement a Unicast Reverse Path Forwarding (uRPF) check for pf(4)Damien Miller
2006-02-20new ftp-proxyCamiel Dobbelaar
2006-01-18Document the "tables" and "table-entries" limit options.Joel Knight
2005-11-17document "log (user)"Joel Knight
2005-09-16in the bnf section, clarify that "fastroute" takes no arguments. also fixDaniel Hartmeier
2005-08-06replace port number 8025 w/ symbolic `spamd';Jason McIntyre
2005-08-05document "set skip on" in the BNF grammar, from David KrauseDaniel Hartmeier
2005-06-14the need to use stateful rules for tagging is goneHenning Brauer
2005-06-05(lightly) document carp(4) in reference to state table;Jason McIntyre
2005-06-03add an ipv6 example;Jason McIntyre
2005-06-02In the BNF section, remove one spurious "proto" and add one missing |.Daniel Hartmeier
2005-05-27s/log-all/log (all)/Daniel Hartmeier
2005-05-26support 'log' and 'log-all' in 'nat/rdr/binat pass' rules. original patchDaniel Hartmeier
2005-05-26sync with realityHenning Brauer
2005-05-23the BNF production is called "load-anchor", found by Magne AndreassenDaniel Hartmeier
2005-05-18max-src-states typo; ok henning@David Krause
2005-03-01occurance -> occurrence;Jason McIntyre
2005-02-27support 'tagged' in translation rules, non-delayed tag lookupDaniel Hartmeier
2005-02-25Mention that if a cbq/hfsc queue definition doesn't specify 'bandwidth'Joel Knight
2005-02-24Document the 'source-track' stateful tracking option. Heavy influenceJoel Knight
2005-01-01Fix some parse errors in example rulesChristopher Pascoe
2004-12-23document icmp type/code text abbreviations recognized by pfctlJared Yanovich
2004-12-22Introduce 'set skip on <ifspec>' to support a list of interfaces where noDaniel Hartmeier
2004-12-22spacingDavid Krause
2004-12-21update to indicate that return-rst generates packetsMichael Coulter
2004-12-19route <label> rewording from otto@;Jason McIntyre
2004-12-18Better wording.Ryan Thomas McBride
2004-12-17Michael Knudsen <e@molioner.dk> says:Henning Brauer
2004-12-12grammar and a little whitespace;Jason McIntyre
2004-12-10document matching on route labelsHenning Brauer
2004-12-08and the example needs 'proto tcp' if it specifies a port, also from mpech@Daniel Hartmeier
2004-12-08overload (not overflow) <table>, at least that's what the parser knows.Daniel Hartmeier
2004-12-07and don't lose the documentation for 'flush global'Daniel Hartmeier
2004-12-07tree does not compile, spotted by dlg (not obvious how to fix)Theo de Raadt
2004-12-07Change the default for 'overload <table> flush' to flush only states from theRyan Thomas McBride
2004-12-04Cleanup and remove a cut-n-pasto. From jmc@Ryan Thomas McBride
2004-12-04Document 'max-src-conn', 'max-src-conn-rate', 'overflow <bad> flush'.Ryan Thomas McBride
2004-11-16Add "probability" to BNFMarco Pfatschbacher
2004-11-08Document "no scrub"; from jmc@, tweaked by me. dhartmei@ okAaron Campbell
2004-10-28s/timeout modulation/timestamp modulation/Ryan Thomas McBride
2004-10-18'random-id' no longer applies only to outgoing packets.Ryan Thomas McBride
2004-09-21Implement "no scrub" to allow exclusion of specific traffic from scrub rules.Aaron Campbell