summaryrefslogtreecommitdiff
path: root/share/man/man5/pf.conf.5
AgeCommit message (Expand)Author
2005-11-17document "log (user)"Joel Knight
2005-09-16in the bnf section, clarify that "fastroute" takes no arguments. also fixDaniel Hartmeier
2005-08-06replace port number 8025 w/ symbolic `spamd';Jason McIntyre
2005-08-05document "set skip on" in the BNF grammar, from David KrauseDaniel Hartmeier
2005-06-14the need to use stateful rules for tagging is goneHenning Brauer
2005-06-05(lightly) document carp(4) in reference to state table;Jason McIntyre
2005-06-03add an ipv6 example;Jason McIntyre
2005-06-02In the BNF section, remove one spurious "proto" and add one missing |.Daniel Hartmeier
2005-05-27s/log-all/log (all)/Daniel Hartmeier
2005-05-26support 'log' and 'log-all' in 'nat/rdr/binat pass' rules. original patchDaniel Hartmeier
2005-05-26sync with realityHenning Brauer
2005-05-23the BNF production is called "load-anchor", found by Magne AndreassenDaniel Hartmeier
2005-05-18max-src-states typo; ok henning@David Krause
2005-03-01occurance -> occurrence;Jason McIntyre
2005-02-27support 'tagged' in translation rules, non-delayed tag lookupDaniel Hartmeier
2005-02-25Mention that if a cbq/hfsc queue definition doesn't specify 'bandwidth'Joel Knight
2005-02-24Document the 'source-track' stateful tracking option. Heavy influenceJoel Knight
2005-01-01Fix some parse errors in example rulesChristopher Pascoe
2004-12-23document icmp type/code text abbreviations recognized by pfctlJared Yanovich
2004-12-22Introduce 'set skip on <ifspec>' to support a list of interfaces where noDaniel Hartmeier
2004-12-22spacingDavid Krause
2004-12-21update to indicate that return-rst generates packetsMichael Coulter
2004-12-19route <label> rewording from otto@;Jason McIntyre
2004-12-18Better wording.Ryan Thomas McBride
2004-12-17Michael Knudsen <e@molioner.dk> says:Henning Brauer
2004-12-12grammar and a little whitespace;Jason McIntyre
2004-12-10document matching on route labelsHenning Brauer
2004-12-08and the example needs 'proto tcp' if it specifies a port, also from mpech@Daniel Hartmeier
2004-12-08overload (not overflow) <table>, at least that's what the parser knows.Daniel Hartmeier
2004-12-07and don't lose the documentation for 'flush global'Daniel Hartmeier
2004-12-07tree does not compile, spotted by dlg (not obvious how to fix)Theo de Raadt
2004-12-07Change the default for 'overload <table> flush' to flush only states from theRyan Thomas McBride
2004-12-04Cleanup and remove a cut-n-pasto. From jmc@Ryan Thomas McBride
2004-12-04Document 'max-src-conn', 'max-src-conn-rate', 'overflow <bad> flush'.Ryan Thomas McBride
2004-11-16Add "probability" to BNFMarco Pfatschbacher
2004-11-08Document "no scrub"; from jmc@, tweaked by me. dhartmei@ okAaron Campbell
2004-10-28s/timeout modulation/timestamp modulation/Ryan Thomas McBride
2004-10-18'random-id' no longer applies only to outgoing packets.Ryan Thomas McBride
2004-09-21Implement "no scrub" to allow exclusion of specific traffic from scrub rules.Aaron Campbell
2004-09-10mention parent (..) anchors,Jared Yanovich
2004-08-25update w.r.t. recursive anchorsJared Yanovich
2004-08-23differentiate between cbq and hfsc;Jason McIntyre
2004-05-09route-to -> reply-to in one case where it was swapped, fromDaniel Hartmeier
2004-05-05Use RFC1323 PAWS timestamps as a logical extension to the conventional TCPMike Frantzen
2004-04-24Add "probability xxx" rule modifier. ok deraadt@Cedric Berger
2004-04-04- fix an .El in the wrong placeJason McIntyre
2004-03-31vender -> vendor, from John Bajana-BacalleDaniel Hartmeier
2004-02-24'source-track' not 'source-tracking'Ryan Thomas McBride
2004-02-04upper case ip;Jason McIntyre
2004-02-04Document 'set limit src-nodes'Ryan Thomas McBride