summaryrefslogtreecommitdiff
path: root/share/man/man5
AgeCommit message (Collapse)Author
2005-01-01Fix some parse errors in example rulesChristopher Pascoe
ok henning@ dhartmei@
2004-12-23document icmp type/code text abbreviations recognized by pfctlJared Yanovich
prodded by John Ladwig <jladwig@mango.lioness.net> ok deraadt jmc
2004-12-22Introduce 'set skip on <ifspec>' to support a list of interfaces where noDaniel Hartmeier
packet filtering should occur (like loopback, for instance). Code from Max Laier, with minor improvements based on feedback from deraadt@. ok mcbride@, henning@
2004-12-22spacingDavid Krause
2004-12-21update to indicate that return-rst generates packetsMichael Coulter
on bridges. Spotted by Simon Kirby. proper caps from jmc@ ok dhartmei@
2004-12-20these files now allow comments. ok deraadt jmc millertJared Yanovich
2004-12-20blowfish defaults to 6 rounds.Moritz Jodeit
patch from mpech@ and ok henning@
2004-12-19route <label> rewording from otto@;Jason McIntyre
ok dhartmei@;
2004-12-18Better wording.Ryan Thomas McBride
2004-12-17Michael Knudsen <e@molioner.dk> says:Henning Brauer
"I think you messed something up when you committed this." and he is right, I lost a word. Dang! And Thanks :)
2004-12-12grammar and a little whitespace;Jason McIntyre
2004-12-10document matching on route labelsHenning Brauer
From: Michael Knudsen <e@molioner.dk> jaredy ok
2004-12-08and the example needs 'proto tcp' if it specifies a port, also from mpech@Daniel Hartmeier
2004-12-08overload (not overflow) <table>, at least that's what the parser knows.Daniel Hartmeier
found by mpech@
2004-12-07and don't lose the documentation for 'flush global'Daniel Hartmeier
2004-12-07tree does not compile, spotted by dlg (not obvious how to fix)Theo de Raadt
---- Change the default for 'overload <table> flush' to flush only states from the offending source created by the rule. 'flush global' flushes all states originating from the offending source. ABI change, requires kernel and pfctl to be in sync. ok deraadt@ henning@ dhartmei@
2004-12-07Change the default for 'overload <table> flush' to flush only states from theRyan Thomas McBride
offending source created by the rule. 'flush global' flushes all states originating from the offending source. ABI change, requires kernel and pfctl to be in sync. ok deraadt@ henning@ dhartmei@
2004-12-04Cleanup and remove a cut-n-pasto. From jmc@Ryan Thomas McBride
2004-12-04Document 'max-src-conn', 'max-src-conn-rate', 'overflow <bad> flush'.Ryan Thomas McBride
2004-12-03gnu -> GNUJonathan Gray
2004-12-02- fix SEE ALSOJason McIntyre
- whitespace
2004-12-02gnu -> GNU;Jason McIntyre
from michael knudsen; ok espie@
2004-11-27document WANTLIBMarc Espie
2004-11-22Add support for setting mixerctl values in a sysctl.conf like mannerJonathan Gray
via mixerctl.conf. ok deraadt@, earlier version ok henning@
2004-11-17Add a small TOC description to the synopsis, since people may not readMarc Espie
long enough to find out about fake, or flavors.
2004-11-17document the update paraphernalia, even though it's still experimental.Marc Espie
2004-11-16Add "probability" to BNFMarco Pfatschbacher
ok henning, markus
2004-11-08Document "no scrub"; from jmc@, tweaked by me. dhartmei@ okAaron Campbell
2004-10-28s/timeout modulation/timestamp modulation/Ryan Thomas McBride
ok frantzen@
2004-10-18'random-id' no longer applies only to outgoing packets.Ryan Thomas McBride
2004-10-11respect alphabetical order better.Marc Espie
2004-10-11full documentation for UNMESSAGEMarc Espie
2004-10-10Add PT_LOOS, PT_HIOS and Elf_Half.Mark Kettenis
ok drahn@
2004-10-08Remove some obvious bogosities.Mark Kettenis
ok deraadt@
2004-10-05Clarify starred accounts and mention /sbin/nologin. OK jmc@Todd C. Miller
2004-10-04add master.passwd to NAME, since that file is documented here too;Jason McIntyre
2004-09-21Implement "no scrub" to allow exclusion of specific traffic from scrub rules.Aaron Campbell
First match wins, just like "no {binat,nat,rdr}". henning@, dhartmei@ ok
2004-09-19document CDROM_SITE defaults to empty and what to set it to; ok espiePeter Valchev
2004-09-16document WRKCONF.Marc Espie
2004-09-15document that SED_PLIST is dead, explain about fragments/substitutions.Marc Espie
Document that DYNLIBDIR/NEWDYNLIBDIR is dead, and that libs must be explicitly marked.
2004-09-10mention parent (..) anchors,Jared Yanovich
mention wildcard (*) anchors, and mention quotes around anchor names. ok dhartmei henning jmc
2004-08-25update w.r.t. recursive anchorsJared Yanovich
and fix an mdoc list display (from jmc) ok dhartmei henning jmc
2004-08-23differentiate between cbq and hfsc;Jason McIntyre
problem found by marc@; this diff based on a patch from sven at sandcat dot nl; ok henning@;
2004-08-18some consistency fixes;Jason McIntyre
2004-08-10Only expand a tilde for strings like "~", "~/..", "~user" and "~user/".Todd C. Miller
For the PATH, only expand a tilde that is at the beginning of the path name. This is similar to the behavior prior to my commit here yesterday.
2004-08-09Support the "setenv" capability in login.conf ala FreeBSD. FollowingTodd C. Miller
FreeBSD's example, a '~' in an environment variable is replaced with the user's homedir. A '$' is replaced by the user's login name. Both can be escaped with a backslash to get the literal char. OK deraadt@
2004-08-03document SHARED_ONLYMarc Espie
2004-07-26various tweaks;Jason McIntyre
2004-07-23add a manpage for /etc/defaultdomainJared Yanovich
help and ok jmc, miod, millert, and others
2004-07-22use full path to netgroup file in SYNOPSISJared Yanovich
mention /etc/netgroup in FILES ok jmc
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-26 09:53:57 +0000