| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2003-06-02 | revert to previous BNF formatting; requested by deraadt@ | David Krause | |
| ok deraadt@ dhartmei@ CVSt e--------------------------------------------------------------------- | |||
| 2003-06-02 | Nuke clause 3 & 4. | Jason Wright | |
| 2003-05-30 | the secgtion is called QUEUEING, not QUEUE RULES, so point people to | Henning Brauer | |
| QUEUEING and not QUEUE RULES... found by Joel Knight | |||
| 2003-05-23 | consistently uppercase abbreviations; | Jason McIntyre | |
| ok henning@ | |||
| 2003-05-21 | typos from pjanzen@ | Jason McIntyre | |
| 2003-05-17 | tweak; 10x jmc | Henning Brauer | |
| 2003-05-17 | tweak | David Krause | |
| ok dhartmei@ | |||
| 2003-05-17 | spelling fix | David Krause | |
| 2003-05-17 | tweak | Henning Brauer | |
| 2003-05-17 | document tags | David Krause | |
| ok henning@ | |||
| 2003-05-16 | tweak; | Jason McIntyre | |
| ok dhartmei@ | |||
| 2003-05-16 | TCP SYN proxy. Instead of 'keep state' or 'modulate state', one can use | Daniel Hartmeier | |
| 'synproxy state' for TCP connections. pf will complete the TCP handshake with the active endpoint before passing any packets to the passive end- point, preventing spoofed SYN floods from reaching the passive endpoint. No additional memory requirements, no cookies needed, random initial sequence numbers, uses the existing sequence number modulators to translate packets after the handshakes. ok frantzen@ | |||
| 2003-05-16 | removed unnecessary macros: | Jason McIntyre | |
| - don't need .Pp before/after .Sh - don't need .Ns before punctuation ok krw@ millert@ david@ | |||
| 2003-05-15 | tweak; | Jason McIntyre | |
| ok frantzen@ | |||
| 2003-05-15 | document scrub opt "reassemble tcp" | Mike Frantzen | |
| 2003-05-12 | Use an example that acutally makes some sense. | Daniel Hartmeier | |
| 2003-05-12 | Adaptive timeout value scaling. Allows to reduce timeout values as the | Daniel Hartmeier | |
| number of state table entries grows, so entries time out faster before the table fills up. Works both globally and per-rule. ok frantzen@ | |||
| 2003-05-11 | document the dynamic min-ttl TCP scrub behavior | Mike Frantzen | |
| 2003-05-10 | 'return' now causes an ICMP unreachable for non-TCP/UDP/ICMP protocols. | Daniel Hartmeier | |
| 2003-05-10 | uppercase all non-literals in BNF.. might make some stuff more clear ;) | Philipp Buehler | |
| commitski henning@ | |||
| 2003-05-10 | typos; | Jason McIntyre | |
| 2003-05-10 | typo; | Jason McIntyre | |
| 2003-05-10 | quote non-alphabetic literals | Philipp Buehler | |
| 'over the desk' oks.. | |||
| 2003-05-10 | document that kernel automatically handles first swap partition | Jason McIntyre | |
| ("swap_device" in swapctl -l) and does not need to be added to /etc/fstab. krw@, fries@, rohee@, millert@, henning@ ok. | |||
| 2003-05-10 | BNF for load anchor stuff | Henning Brauer | |
| 2003-05-09 | Talk about the .db version of login.conf; idea from mpech@ | Todd C. Miller | |
| 2003-05-09 | Update to reflect reality. The kerberos authentication methods listed | Todd C. Miller | |
| were out of date and there were missing -v options. | |||
| 2003-05-07 | changed example fstab file; fs_passno should be 2 for non-root filesystems. | Jason McIntyre | |
| 2003-05-06 | fix formatting in the BNF | Henning Brauer | |
| 2003-05-01 | BNF update for label on antispoof | Henning Brauer | |
| 2003-04-29 | document hfsc | Henning Brauer | |
| mostly from Berk D. Demir <bdd at ieee.org> with tweaks by me some nits and ok jmc@ | |||
| 2003-04-29 | port 8081 -> 8021 for ftp-proxy in the examples, so it matches pf.conf | Daniel Hartmeier | |
| and inetd.conf defaults | |||
| 2003-04-25 | added two missing .El macros; | Jason McIntyre | |
| ok henning@ | |||
| 2003-04-19 | BNF update for hfsc | Henning Brauer | |
| 2003-04-19 | mention hfsc. | Henning Brauer | |
| this needs more work. | |||
| 2003-04-14 | document update-plist only, since "plist" target is the same thing, | Peter Valchev | |
| remove useless references to it; hinted by espie | |||
| 2003-04-14 | standalone/stand alone -> stand-alone; | Jason McIntyre | |
| from NetBSD (Igor Sobrado); httpd stuff passed to apache people; ok millert@ | |||
| 2003-04-13 | some improvements from grange@ - thanks! | Jason McIntyre | |
| 2003-04-13 | man page added for mk.conf; | Jason McIntyre | |
| closes PR 3130; ok millert@ | |||
| 2003-04-05 | document queue .. on $interface | Henning Brauer | |
| ok jmc@ | |||
| 2003-04-03 | CD-Rom, cd-rom -> CD-ROM | Jason McIntyre | |
| 2003-04-02 | pci -> PCI; | Jason McIntyre | |
| killed some whitespace at EOL | |||
| 2003-04-02 | Hewlett Packard -> Hewlett-Packard | Jason McIntyre | |
| 2003-04-01 | Elf, elf -> ELF | Jason McIntyre | |
| 2003-04-01 | 'flags X' is not valid (BNF lied) | Philipp Buehler | |
| henning@ ok | |||
| 2003-04-01 | anchors in BNF | Philipp Buehler | |
| (from loki at niteshade . net) | |||
| 2003-03-31 | ascii -> ASCII | Jason McIntyre | |
| 2003-03-28 | - no more /var/ssyslog (unused) | Jason McIntyre | |
| - no more /var/spool/lpd (lpd uses /var/spool/output) - no more /var/preserve (old vi directory) - update docs to reflect this help with systrace provos@ help and ok millert@ | |||
| 2003-03-22 | missing space between macro argument and comma | David Krause | |
| ok jmc@ | |||
| 2003-03-22 | Cleanup for release: | David Krause | |
| remove some unneeded escaping of spaces "\ " indent by 6 spaces in a few places to match the rest of the file fix a few lines that were improperly wrapped or not wrapped to the next line update sample rule expansion to match current state of pfctl output fix spacing in a few places fix a small typo found by jmc@ updated a few example rules so that they parse with current pfctl ok henning@ jmc@ | |||
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |