summaryrefslogtreecommitdiff
path: root/share/man/man5
AgeCommit message (Collapse)Author
2002-07-30BNF is now in sync with reality:Philipp Buehler
- commas are optional in lists ok henning@, dhartmei@
2002-07-30BNF catchup and consolidation of interface name handling:Philipp Buehler
ok henning@, dhartmei@
2002-07-30Merge filter and nat BNF for simplification:Philipp Buehler
- top of reduction is now 'line', better to add more keywords later on - reorder, group - remove double productions ok dhartmei@, henning@
2002-07-30BNF catchup to reality:Philipp Buehler
- set loginterface none - add "self" to hosts ok henning@
2002-07-30typo/pasto in route-to/dup-to syntaxPhilipp Buehler
ok henning@
2002-07-30.Sh GRAMMAR moves to bottom, it's a reference and not readablePhilipp Buehler
for the casual user in first place ok henning@
2002-07-3065335->65535 typoPhilipp Buehler
henning ok@
2002-07-30backout, this will go in in little piecesPhilipp Buehler
as advised by theo and henning
2002-07-29o complete restructuringPhilipp Buehler
o BNF has been fixed and should represent -current as close as possible o theo: commit this, and then let us get started fixing it.
2002-07-21fix route-to alsoTheo de Raadt
2002-07-06Move NEED_VERSION to "obsolete variables" section and describePeter Valchev
briefly what it used to be for.
2002-07-05document "set loginterface none"Henning Brauer
2002-07-04document setting options in pf.confHenning Brauer
ok dhartmei@
2002-07-03Xr fixups, mostly from PR 2793Miod Vallat
2002-07-01Language improvements and line wrapping fixes, from Moritz JodeitDaniel Hartmeier
2002-06-24Fix more example rulesDaniel Hartmeier
2002-06-20Use 'inet' in translation rules where required, add example for proxyDaniel Hartmeier
port selection. From jolan at enteract dot com
2002-06-20typo from form@.Mike Pechkin
2002-06-20Spotted by form@, mdoc things from mpech@:Mike Pechkin
o) wrap long lines; o) start new sentence on a new line; o) 41952 -> 49151; o) add 'flags S/SA' in "FILTER EXAMPLES"; o) remove blank lines before .Ed; dhartmei@, henning@
2002-06-19Sync.Mike Pechkin
#include -> .include naddy@, espie@ ok
2002-06-17no nat.conf(5) softlinkPeter Valchev
2002-06-16keep nat.conf(5) softlink, from ckuethe@ualberta.caPeter Valchev
2002-06-16someone didn't do a make buildPeter Valchev
2002-06-16bye byeHenning Brauer
2002-06-16merge nat.conf.5Henning Brauer
most work by Chris Kuethe, some changes by me. ok dhartmei@, pb@
2002-06-14spelling; from Brian Poole <raj@cerias.purdue.edu>Todd T. Fries
2002-06-13Mention that the "old" cipher just means DES; suggested by Michael LucasTodd C. Miller
2002-06-11Make NAT proxy port range configurable per rule, for instance privilegedDaniel Hartmeier
source ports can mapped to privileged proxy ports, or source port 500 to proxy port 500. ok frantzen@
2002-06-10Allow ports to be specified in nat rules, useful later on for individualDaniel Hartmeier
proxy port ranges.
2002-06-08.Xr pf.conf 5 . -> pfctl 8, from Dries SchellekensDaniel Hartmeier
2002-06-08no macro concatenationHenning Brauer
2002-06-08'(' -> "(" in BNF, from Dries SchellekensDaniel Hartmeier
2002-06-08document macro concatenationHenning Brauer
ok dhartmei@
2002-06-08Make state timeouts configurable per rule, likeDaniel Hartmeier
pass in from any to any port www keep state (tcp.established 60) ok frantzen@
2002-06-08document $proto, $nr in rule labelsHenning Brauer
add example ok dhartmei@
2002-06-07add the possibility to configure a TTL while return-rstPhilipp Buehler
ok dhartmei@, ipv6 part itojun@ ok
2002-06-07Add "(max <number>)" option for "keep/modulate state" to limit the numberDaniel Hartmeier
of concurrent connections a rule can create. ok frantzen@
2002-06-07document $srcaddr/$srcport/$dstaddr/$dstport in rule labelsHenning Brauer
ok dhartmei@
2002-06-05document "print-depends" target; ok espiePeter Valchev
2002-06-03Xref brconfig(8).Miod Vallat
2002-06-03Add NAT keyword so it is picked up by apropos (man -k NAT). ok dhartmei@Kjell Wooding
2002-06-01Document ECN support, with input from dhartmei@.Hugh Graham
2002-05-30grammar fix; moritz@jodeit.orgTheo de Raadt
2002-05-27support ":" prefix as group name, as username can contain ".".Jun-ichiro itojun Hagino
(still support "." as welll). passwd.conf support will go away in a couple of months anyways... ok by millert
2002-05-23'SEE ALSO' audit in 'share/man/':Mike Pechkin
o) sort; o) "," is separator of entries; o) don't use "." or "," in the last entry; millert@ ok
2002-05-16Add a few useful xrefs.Miod Vallat
2002-05-13Document ${SITE:=subdir/}, say goodbye to MASTER_SITE_SUBDIRMarc Espie
Nifty idea, taken from NetBSD
2002-05-12Explain that user/group 'unknown' can only be used with operators = and !=Daniel Hartmeier
and refuse other constructs in the parser. Also note that 'user >= 0' does not match forwarded packets with unknown user ID.
2002-05-12Add gid based filtering, reduce to one (effective) uid, rename parserDaniel Hartmeier
keywords to 'user' and 'group'.
2002-05-09Add a max-mss option to the scrub rule which will enforce a maximum mssjasoni
by lowering it to the given value. - ok dhartmei@, provos@