summaryrefslogtreecommitdiff
path: root/usr.sbin/authpf/authpf.8
AgeCommit message (Collapse)Author
2010-01-27tweak previous: there was a word missing, but i've just changedJason McIntyre
the wording to match that of a similar piece of text already in this page;
2010-01-27search for authpf.message in $USER dirs alsoTodd T. Fries
from Rafal Bisingier ravbc at man dot pozman dot pl, ok beck@
2009-10-26"rdr" -> "match in...rdr-to" in example.Stuart Henderson
2009-09-08Replace remaining occurrence of old PF syntax with "match...nat-to",Stuart Henderson
and just talk about "rules" rather than "filter and translation rules". Spotted by/ok jmc@
2009-09-08Remove some nat-anchor, binat-anchor, rdr-anchor. Noticed by jmc@.Stuart Henderson
ok henning@
2009-01-06Support group and login class in authpf.allow (%<group>, @<class>)Ryan Thomas McBride
ok beck
2008-03-18Fix mention of authpf_users table (s/authpf users/authpf_users/).Michael Erdely
ok jmc@, mcbride@
2008-02-14Add authpf-noip, which allows multiple users to connect from a single IP;Ryan Thomas McBride
forces users to write sane rulesets for this by not providing $user_ip or updating the authpf table. testing and prodding by mtu, manpage heavily worked over by jmc ok beck dhartmei henning
2007-05-31convert to new .Dd format;Jason McIntyre
2007-02-24license + copyrightBob Beck
2006-10-23no need to use "keep state" and "flags S/SA" in pf rules,Jason McIntyre
now that it is the default; ok henning mcbride camield (ftp-proxy bits) deraadt
2006-01-07expand the section on ssh tunnelling machanisms;Jason McIntyre
from michael knudsen
2005-09-23default port for ftp-proxy is 8021;Jason McIntyre
from johnb (pr #4520); ok deraadt@ ian@
2005-05-12Xr securelevel 7Jason McIntyre
from tamas tevesz;
2005-01-04simplified FILTER AND TRANSLATION RULES;Jason McIntyre
from michael knudsen;
2004-09-15AllowTcpForwarding should be disabled for authpf users;Jason McIntyre
plus a typo; from michael knudsen; ok beck@
2004-08-15document the use of "authpf/*" as anchor name for pf to processCan Erkin Acar
sub rulesets added by authpf. ok dhartmei@, oh yes! henning@
2004-06-07consistently refer to the authpf_users table;Jason McIntyre
noticed by die tuere; ok beck@
2004-04-28kill whitespace and make example consistent w/ rest of page;Jason McIntyre
2004-04-28speed up -> sped up, from tedu@, ok beck@Cedric Berger
2004-04-28Put authpf user's IP addresses in the <authpf_users> table.Cedric Berger
ok deraadt@ dhartmei@ markus@ mcbride@
2003-12-10- fix a few exit cases that would exit with no logBob Beck
- add username to added ruleset names when possible - add much needed example to man page showing how to use NAT with tagging to track NATed authpfed connections. ok henning@ dhartmei@, man page cleanup by jmc@
2003-08-17damn liesHenning Brauer
2003-08-04ClientAliveInterval requires Protocol 2;Jason McIntyre
noted by Marc Revial on misc@; ok markus@
2003-06-23authpf can handle binat nowadays; from Joel KnightHenning Brauer
ok daniel
2003-06-12- section reorderJason McIntyre
- macro fixes - kill whitespace at EOL - new sentence, new line
2003-03-20replace some .Pp inside .Bd -literal block with empty lineDavid Krause
new sentence, new line fix login.conf indentation ok jmc@
2003-03-18ip address -> IP address;Jason McIntyre
rtadvd.conf(5): positve -> positive; ok miod@
2003-03-11removed .Ic's which were giving postscript trouble;Jason McIntyre
ok deraadt@
2003-03-10these pages all had bad section numbers in the .Xr's;Jason McIntyre
lots of help and ok millert@
2003-03-06date should be written formally: .Dd Month day, yearDavid Krause
ok henning@ jmc@
2003-01-28typos; added white boldface to examplesJason McIntyre
ok deraadt@
2002-12-29Mention $user_id, like $user_ip.Daniel Hartmeier
2002-12-22Instead of inserting and removing rules at the top/bottom of the mainDaniel Hartmeier
ruleset, make authpf manage its rules inside anchors.
2002-10-25- spelling/grammarCamiel Dobbelaar
- nat rules are no longer in a seperate file, combine nat example - /32 on all addresses is clutter, since it's the default
2002-07-27Typo; spotted by cdjones@novusordo.net.Thomas Nordin
2002-06-24Fix more example rulesDaniel Hartmeier
2002-06-24When the man page contains such obvious stupid TRIVIAL bugs as thisTheo de Raadt
which I am fixing, it makes me wonder why the hell is the shown example not something that someone has actually TRIED? Is it not possible people are yammering so much about it on the mailing lists about problems because the people who wrote this don't even check if the man page is CORRECT? But No! Instead of fixing it, the they get email replies on the damned mailing list, and 8 hours later, someone ELSE pipes up with another problem! Why don't you lame asses take responsibility for the problem at hand, CHECK IF THE MAN PAGE IS RIGHT, and instead of replying to the people who post, instead JUST FIX THE DOCUMENTATION PROBLEMS? Or should I remove authpf before you get the idea?
2002-06-24"quick log" -> "log quick" in example rules, from Rudolfo MunguiaDaniel Hartmeier
2002-06-16Remove nat.conf(5) reference.Miod Vallat
2002-06-11Update man page to reality, grammar, and style fixes. from ckuethe@ualberta.caKjell Wooding
ok beck@
2002-05-21cleanTheo de Raadt
2002-04-15fix a typo; from andrew@neep.com.auPeter Valchev
2002-04-06root checks are removed now that we moved the per-user dir,Bob Beck
docs need to reflect this
2002-04-05move location of per-user config files; beck okTheo de Raadt
2002-04-05ensure that rules files are owned and writable only by root,Bob Beck
along their entire path, change docs accordingly. This ensures that people don't accidentally use the $HOME config files to override real settings unless root meant to do it.
2002-04-02We don't like 'OPTIONS' anymore.Mike Pechkin
.Sh OPTIONS -> .Sh CONFIGURATION millert@ ok
2002-04-02My part of the help:Mike Pechkin
o) don't use .Pp before/after .Sh; o) Start new sentence on a new line; o) Remove extra space in the end of the sentence; o) Fix .Pa usage; o) Fix .Bd usage; o) Use .Pp after .Ed, not blank line before .Ed; millert@ ok
2002-04-01-Tattling is bad, users should be allowed to run anything on the systemBob Beck
without it generating logs -exit with 0 and 1 instead of EX_FOO -make read_config (with the test and exit) the first thing that happens in main, no openlog or memset first.
2002-04-01remove a redundant word removeMichael Shalayeff