Age | Commit message (Collapse) | Author | |
---|---|---|---|
2002-07-30 | BNF is now in sync with reality: | Philipp Buehler | |
- commas are optional in lists ok henning@, dhartmei@ | |||
2002-07-30 | BNF catchup and consolidation of interface name handling: | Philipp Buehler | |
ok henning@, dhartmei@ | |||
2002-07-30 | Merge filter and nat BNF for simplification: | Philipp Buehler | |
- top of reduction is now 'line', better to add more keywords later on - reorder, group - remove double productions ok dhartmei@, henning@ | |||
2002-07-30 | BNF catchup to reality: | Philipp Buehler | |
- set loginterface none - add "self" to hosts ok henning@ | |||
2002-07-30 | typo/pasto in route-to/dup-to syntax | Philipp Buehler | |
ok henning@ | |||
2002-07-30 | .Sh GRAMMAR moves to bottom, it's a reference and not readable | Philipp Buehler | |
for the casual user in first place ok henning@ | |||
2002-07-30 | 65335->65535 typo | Philipp Buehler | |
henning ok@ | |||
2002-07-30 | backout, this will go in in little pieces | Philipp Buehler | |
as advised by theo and henning | |||
2002-07-29 | o complete restructuring | Philipp Buehler | |
o BNF has been fixed and should represent -current as close as possible o theo: commit this, and then let us get started fixing it. | |||
2002-07-21 | fix route-to also | Theo de Raadt | |
2002-07-06 | Move NEED_VERSION to "obsolete variables" section and describe | Peter Valchev | |
briefly what it used to be for. | |||
2002-07-05 | document "set loginterface none" | Henning Brauer | |
2002-07-04 | document setting options in pf.conf | Henning Brauer | |
ok dhartmei@ | |||
2002-07-03 | Xr fixups, mostly from PR 2793 | Miod Vallat | |
2002-07-01 | Language improvements and line wrapping fixes, from Moritz Jodeit | Daniel Hartmeier | |
2002-06-24 | Fix more example rules | Daniel Hartmeier | |
2002-06-20 | Use 'inet' in translation rules where required, add example for proxy | Daniel Hartmeier | |
port selection. From jolan at enteract dot com | |||
2002-06-20 | typo from form@. | Mike Pechkin | |
2002-06-20 | Spotted by form@, mdoc things from mpech@: | Mike Pechkin | |
o) wrap long lines; o) start new sentence on a new line; o) 41952 -> 49151; o) add 'flags S/SA' in "FILTER EXAMPLES"; o) remove blank lines before .Ed; dhartmei@, henning@ | |||
2002-06-19 | Sync. | Mike Pechkin | |
#include -> .include naddy@, espie@ ok | |||
2002-06-17 | no nat.conf(5) softlink | Peter Valchev | |
2002-06-16 | keep nat.conf(5) softlink, from ckuethe@ualberta.ca | Peter Valchev | |
2002-06-16 | someone didn't do a make build | Peter Valchev | |
2002-06-16 | bye bye | Henning Brauer | |
2002-06-16 | merge nat.conf.5 | Henning Brauer | |
most work by Chris Kuethe, some changes by me. ok dhartmei@, pb@ | |||
2002-06-14 | spelling; from Brian Poole <raj@cerias.purdue.edu> | Todd T. Fries | |
2002-06-13 | Mention that the "old" cipher just means DES; suggested by Michael Lucas | Todd C. Miller | |
2002-06-11 | Make NAT proxy port range configurable per rule, for instance privileged | Daniel Hartmeier | |
source ports can mapped to privileged proxy ports, or source port 500 to proxy port 500. ok frantzen@ | |||
2002-06-10 | Allow ports to be specified in nat rules, useful later on for individual | Daniel Hartmeier | |
proxy port ranges. | |||
2002-06-08 | .Xr pf.conf 5 . -> pfctl 8, from Dries Schellekens | Daniel Hartmeier | |
2002-06-08 | no macro concatenation | Henning Brauer | |
2002-06-08 | '(' -> "(" in BNF, from Dries Schellekens | Daniel Hartmeier | |
2002-06-08 | document macro concatenation | Henning Brauer | |
ok dhartmei@ | |||
2002-06-08 | Make state timeouts configurable per rule, like | Daniel Hartmeier | |
pass in from any to any port www keep state (tcp.established 60) ok frantzen@ | |||
2002-06-08 | document $proto, $nr in rule labels | Henning Brauer | |
add example ok dhartmei@ | |||
2002-06-07 | add the possibility to configure a TTL while return-rst | Philipp Buehler | |
ok dhartmei@, ipv6 part itojun@ ok | |||
2002-06-07 | Add "(max <number>)" option for "keep/modulate state" to limit the number | Daniel Hartmeier | |
of concurrent connections a rule can create. ok frantzen@ | |||
2002-06-07 | document $srcaddr/$srcport/$dstaddr/$dstport in rule labels | Henning Brauer | |
ok dhartmei@ | |||
2002-06-05 | document "print-depends" target; ok espie | Peter Valchev | |
2002-06-03 | Xref brconfig(8). | Miod Vallat | |
2002-06-03 | Add NAT keyword so it is picked up by apropos (man -k NAT). ok dhartmei@ | Kjell Wooding | |
2002-06-01 | Document ECN support, with input from dhartmei@. | Hugh Graham | |
2002-05-30 | grammar fix; moritz@jodeit.org | Theo de Raadt | |
2002-05-27 | support ":" prefix as group name, as username can contain ".". | Jun-ichiro itojun Hagino | |
(still support "." as welll). passwd.conf support will go away in a couple of months anyways... ok by millert | |||
2002-05-23 | 'SEE ALSO' audit in 'share/man/': | Mike Pechkin | |
o) sort; o) "," is separator of entries; o) don't use "." or "," in the last entry; millert@ ok | |||
2002-05-16 | Add a few useful xrefs. | Miod Vallat | |
2002-05-13 | Document ${SITE:=subdir/}, say goodbye to MASTER_SITE_SUBDIR | Marc Espie | |
Nifty idea, taken from NetBSD | |||
2002-05-12 | Explain that user/group 'unknown' can only be used with operators = and != | Daniel Hartmeier | |
and refuse other constructs in the parser. Also note that 'user >= 0' does not match forwarded packets with unknown user ID. | |||
2002-05-12 | Add gid based filtering, reduce to one (effective) uid, rename parser | Daniel Hartmeier | |
keywords to 'user' and 'group'. | |||
2002-05-09 | Add a max-mss option to the scrub rule which will enforce a maximum mss | jasoni | |
by lowering it to the given value. - ok dhartmei@, provos@ |