summaryrefslogtreecommitdiff
path: root/share/man/man5/pf.conf.5
AgeCommit message (Expand)Author
2005-05-26sync with realityHenning Brauer
2005-05-23the BNF production is called "load-anchor", found by Magne AndreassenDaniel Hartmeier
2005-05-18max-src-states typo; ok henning@David Krause
2005-03-01occurance -> occurrence;Jason McIntyre
2005-02-27support 'tagged' in translation rules, non-delayed tag lookupDaniel Hartmeier
2005-02-25Mention that if a cbq/hfsc queue definition doesn't specify 'bandwidth'Joel Knight
2005-02-24Document the 'source-track' stateful tracking option. Heavy influenceJoel Knight
2005-01-01Fix some parse errors in example rulesChristopher Pascoe
2004-12-23document icmp type/code text abbreviations recognized by pfctlJared Yanovich
2004-12-22Introduce 'set skip on <ifspec>' to support a list of interfaces where noDaniel Hartmeier
2004-12-22spacingDavid Krause
2004-12-21update to indicate that return-rst generates packetsMichael Coulter
2004-12-19route <label> rewording from otto@;Jason McIntyre
2004-12-18Better wording.Ryan Thomas McBride
2004-12-17Michael Knudsen <e@molioner.dk> says:Henning Brauer
2004-12-12grammar and a little whitespace;Jason McIntyre
2004-12-10document matching on route labelsHenning Brauer
2004-12-08and the example needs 'proto tcp' if it specifies a port, also from mpech@Daniel Hartmeier
2004-12-08overload (not overflow) <table>, at least that's what the parser knows.Daniel Hartmeier
2004-12-07and don't lose the documentation for 'flush global'Daniel Hartmeier
2004-12-07tree does not compile, spotted by dlg (not obvious how to fix)Theo de Raadt
2004-12-07Change the default for 'overload <table> flush' to flush only states from theRyan Thomas McBride
2004-12-04Cleanup and remove a cut-n-pasto. From jmc@Ryan Thomas McBride
2004-12-04Document 'max-src-conn', 'max-src-conn-rate', 'overflow <bad> flush'.Ryan Thomas McBride
2004-11-16Add "probability" to BNFMarco Pfatschbacher
2004-11-08Document "no scrub"; from jmc@, tweaked by me. dhartmei@ okAaron Campbell
2004-10-28s/timeout modulation/timestamp modulation/Ryan Thomas McBride
2004-10-18'random-id' no longer applies only to outgoing packets.Ryan Thomas McBride
2004-09-21Implement "no scrub" to allow exclusion of specific traffic from scrub rules.Aaron Campbell
2004-09-10mention parent (..) anchors,Jared Yanovich
2004-08-25update w.r.t. recursive anchorsJared Yanovich
2004-08-23differentiate between cbq and hfsc;Jason McIntyre
2004-05-09route-to -> reply-to in one case where it was swapped, fromDaniel Hartmeier
2004-05-05Use RFC1323 PAWS timestamps as a logical extension to the conventional TCPMike Frantzen
2004-04-24Add "probability xxx" rule modifier. ok deraadt@Cedric Berger
2004-04-04- fix an .El in the wrong placeJason McIntyre
2004-03-31vender -> vendor, from John Bajana-BacalleDaniel Hartmeier
2004-02-24'source-track' not 'source-tracking'Ryan Thomas McBride
2004-02-04upper case ip;Jason McIntyre
2004-02-04Document 'set limit src-nodes'Ryan Thomas McBride
2004-01-06group-locked -> group-bound, from J. KnightCedric Berger
2003-12-31typos;Jason McIntyre
2003-12-31Many improvements to the handling of interfaces in PF.Cedric Berger
2003-12-15- kill whitespace at EOLJason McIntyre
2003-12-15Add support to track stateful connections by source ip. This allows usRyan Thomas McBride
2003-11-29allow ':' (range including boundaries) to be used whereever '><' (rangeDaniel Hartmeier
2003-11-24fix load anchor BNF.Henning Brauer
2003-11-18more literal confusion, "(" ")" vs. ( )Daniel Hartmeier
2003-11-18un-quote "return" where it's meant to reference a bnf productionDaniel Hartmeier
2003-11-14update BNF for set debug too, again catched by mpech@Henning Brauer