summaryrefslogtreecommitdiff
path: root/share/man/man5
AgeCommit message (Collapse)Author
2003-07-09fix some lists and some typos;Jason McIntyre
2003-07-09Better formulation for USE_BZIP2/USE_ZIP.Marc Espie
Add SYSCONFDIR to the list of variables not heeded consistently.
2003-07-09mention maintainer is now recorded in descriptionPeter Valchev
2003-07-07fix a macro and remove a whitespace at EOL;Jason McIntyre
ok henning@
2003-07-07clarification in nat pass, pointed out by theoHenning Brauer
2003-07-07I'm pretty sure the formatting cleanup & clarifications here that Joel KnightHenning Brauer
did in negotiation with jmc@ included some dancing with dead chicken ritual from Joel Knight ok jmc@
2003-07-05fix inaccuracy in obsolete NO_CONFIGURE variable descriptionPeter Valchev
2003-07-04Update based on reality; this should probably be renamed dirent.5Todd C. Miller
jmc@ OK
2003-07-04nat passHenning Brauer
ok jmc@
2003-07-04off byone; netbsd pr 22012Markus Friedl
2003-07-01one more correction to a list, and add a .Pp;Jason McIntyre
2003-06-30simplify a list, better format example;Jason McIntyre
2003-06-30update-plist handles multi-packages correctly, now.Marc Espie
2003-06-27Add more info on what makes a good login name.Todd C. Miller
2003-06-21s/for spall files/for small files/Daniel Hartmeier
2003-06-17Sync with share/misc/license.template and add missing DARPA creditTodd C. Miller
where applicable.
2003-06-17add adaptive, interval, and frag timeouts to pf.conf and BNFDavid Krause
ok henning@ dhartmei@
2003-06-12qlimit referenced twice from queueopts, PR 3312Henning Brauer
2003-06-11ref table-rule from line, PR 3311Henning Brauer
2003-06-11document that is is unsupported to use return-rst/icmp or synproxyPhilipp Buehler
on bridging firewalls henning@ ok, spelling fixes from jmc@
2003-06-10fix grammer regarding queues; noted by jlouis@mongers.orgTheo de Raadt
2003-06-09Switch to 2 clause licenses. Spotted by Theo.Hugh Graham
2003-06-07update BNF to show that tagging is also possible on rdr/nat/binatHenning Brauer
2003-06-07second part of the diff from Joel Knight that was sitting in my inbox forHenning Brauer
far too long: better tag documentation. help and ok jmc@
2003-06-07update BNF to include "! tagged"Henning Brauer
2003-06-07document "load anchor from file"Henning Brauer
mostly from Joel Knight help and ok jmc@
2003-06-06- section reorderJason McIntyre
- macro fixes - kill whitespace at EOL
2003-06-04Don't mention the "alwaysuseklogin" option as it has never been usedHans Insulander
by us. ok millert@
2003-06-03make crystal clear that NAT happens before filtering and what thatHenning Brauer
means for the filter rules. from Joel Knight again ok cedric@, silence everybody else
2003-06-03Don't refer to kerberos 4Hans Insulander
2003-06-03Use an ISC-tyle license for all my code; it is simpler and more permissive.Todd C. Miller
2003-06-02Remove the advertising clause in the UCB license which BerkeleyTodd C. Miller
rescinded 22 July 1999. Proofed by myself and Theo.
2003-06-02revert to previous BNF formatting; requested by deraadt@David Krause
ok deraadt@ dhartmei@ CVSt e---------------------------------------------------------------------
2003-06-02Nuke clause 3 & 4.Jason Wright
2003-05-30the secgtion is called QUEUEING, not QUEUE RULES, so point people toHenning Brauer
QUEUEING and not QUEUE RULES... found by Joel Knight
2003-05-23consistently uppercase abbreviations;Jason McIntyre
ok henning@
2003-05-21typos from pjanzen@Jason McIntyre
2003-05-17tweak; 10x jmcHenning Brauer
2003-05-17tweakDavid Krause
ok dhartmei@
2003-05-17spelling fixDavid Krause
2003-05-17tweakHenning Brauer
2003-05-17document tagsDavid Krause
ok henning@
2003-05-16tweak;Jason McIntyre
ok dhartmei@
2003-05-16TCP SYN proxy. Instead of 'keep state' or 'modulate state', one can useDaniel Hartmeier
'synproxy state' for TCP connections. pf will complete the TCP handshake with the active endpoint before passing any packets to the passive end- point, preventing spoofed SYN floods from reaching the passive endpoint. No additional memory requirements, no cookies needed, random initial sequence numbers, uses the existing sequence number modulators to translate packets after the handshakes. ok frantzen@
2003-05-16removed unnecessary macros:Jason McIntyre
- don't need .Pp before/after .Sh - don't need .Ns before punctuation ok krw@ millert@ david@
2003-05-15tweak;Jason McIntyre
ok frantzen@
2003-05-15document scrub opt "reassemble tcp"Mike Frantzen
2003-05-12Use an example that acutally makes some sense.Daniel Hartmeier
2003-05-12Adaptive timeout value scaling. Allows to reduce timeout values as theDaniel Hartmeier
number of state table entries grows, so entries time out faster before the table fills up. Works both globally and per-rule. ok frantzen@
2003-05-11document the dynamic min-ttl TCP scrub behaviorMike Frantzen