summaryrefslogtreecommitdiff
path: root/usr.sbin/authpf
AgeCommit message (Collapse)Author
2003-02-19sync to pfctl; BAD HENNING BAD BAD BAD NO COOKIETheo de Raadt
2003-02-11adjust after pfctl changesHenning Brauer
2003-02-03typos and minor KNF; from andrushock, thanks!Henning Brauer
2003-02-02adjust after pfctl change; parse_rules doesn't take opts seperately any moreHenning Brauer
2003-01-29do setprocticle; ok camieldTheo de Raadt
2003-01-28typos; added white boldface to examplesJason McIntyre
ok deraadt@
2003-01-27remove some unused includes, from Andrey MatveevDaniel Hartmeier
2003-01-26mop up, from krwDaniel Hartmeier
2003-01-25Permit initialisation of a table content from a file in pf.conf.Cedric Berger
Cleaning up of the table options parsing, more flexible. idea+cleanup deraadt@, ok dhartmei@, pass all regress tests.
2003-01-09Add support for active/inactive tablesets in the kernel.Cedric Berger
Add table definition/initialisation construct in pfctl parser. Add and fix documentation for pf.4 and pf.conf.5. Tested on i386 and sparc64 by myself, macppc by Daniel. ok dhartmei@
2003-01-07Add function to search for and remove stale rulesets from other authpfDaniel Hartmeier
processes which have terminated unexpectedly. ok beck@
2003-01-06nicer syslogTheo de Raadt
2003-01-05Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for tableDaniel Hartmeier
name. ok henning@, mcbride@, cedric@
2003-01-03Bring in userland code for accessing PF radix tables.Cedric Berger
ok dhartmei@ mcbride@
2003-01-01Scrub and filter rules are separated now, adjust authpf accordingly.Daniel Hartmeier
2002-12-29Mention $user_id, like $user_ip.Daniel Hartmeier
2002-12-29Set a macro $user_id to the user name, just like $user_ip is already setDaniel Hartmeier
to the IP address. From discussion with Michael Lucas. ok henning@
2002-12-22KNFHenning Brauer
2002-12-22Instead of inserting and removing rules at the top/bottom of the mainDaniel Hartmeier
ruleset, make authpf manage its rules inside anchors.
2002-12-19redundant memsetHenning Brauer
2002-12-19KNFHenning Brauer
2002-12-18Fix tree breakage; match changes to struct pfctl (now contains an arrayRyan Thomas McBride
of pointers to pfioc_rule). Fix from henning@ ok dhartmei@
2002-12-17Match merge of pf_nat/pf_binat/pf_rdr structs into pf_ruleRyan Thomas McBride
- Move pf_compare* functions here - fix ioctls.
2002-12-06Introduce anchors and named rule sets, allowing to load additional ruleDaniel Hartmeier
sets with pfctl and evaluate them from the main rule set using a new type of rule (which will support conditional evaluation soon). Makes maintenance of sub-rulesets simpler for pfctl and daemons. Idea and ok deraadt@
2002-12-04catch up to -v -v change in pfctl(8)Theo de Raadt
2002-12-01KNFHenning Brauer
2002-12-01Match pf_ioctl.c cleanup; if we're doing a DIOCCHANGE* operation which usesRyan Thomas McBride
old*, we need to call DIOCBEGINADDRS twice: once for the old rule/rdr/nat, and once for the new one. ok dhartmei@ henning@
2002-11-23don't try to do ioctl with PF_OPT_NOACTIONRyan Thomas McBride
does not impact fuction of authpf, but make it consistent with the rest of the add_* family ok dhartmei@
2002-11-23add code to load lists of redirection addresses for nat/rdr/route-to/etc.Ryan Thomas McBride
2002-11-22Disallow non-interactive sessions, to avoid problem of users scp'ingBob Beck
to authpf gateway - noticed by Devan Reade <gdr@gno.org>, ok henning
2002-11-19be more preciseTheo de Raadt
2002-11-19hacks to make the tree build; henning gets a carrot up the nose next time i ↵Theo de Raadt
meet him
2002-10-25Remove PATH_NATRULES, since nat is no longer in a seperate file.Camiel Dobbelaar
2002-10-25- spelling/grammarCamiel Dobbelaar
- nat rules are no longer in a seperate file, combine nat example - /32 on all addresses is clutter, since it's the default
2002-10-25- be even more careful with data supplied from outsideCamiel Dobbelaar
- check explicitly for negative values from snprintf (-pedantic) - use MAXLOGNAME - use parentheses with all sizeof's for consistency
2002-07-27Typo; spotted by cdjones@novusordo.net.Thomas Nordin
2002-07-13make sure to clean all files.Artur Grabowski
2002-06-25hooks for options.Henning Brauer
we don't support setting pf options via authpf, but need the hooks here, too. ok dhartmei@, kjell@
2002-06-24Fix more example rulesDaniel Hartmeier
2002-06-24When the man page contains such obvious stupid TRIVIAL bugs as thisTheo de Raadt
which I am fixing, it makes me wonder why the hell is the shown example not something that someone has actually TRIED? Is it not possible people are yammering so much about it on the mailing lists about problems because the people who wrote this don't even check if the man page is CORRECT? But No! Instead of fixing it, the they get email replies on the damned mailing list, and 8 hours later, someone ELSE pipes up with another problem! Why don't you lame asses take responsibility for the problem at hand, CHECK IF THE MAN PAGE IS RIGHT, and instead of replying to the people who post, instead JUST FIX THE DOCUMENTATION PROBLEMS? Or should I remove authpf before you get the idea?
2002-06-24"quick log" -> "log quick" in example rules, from Rudolfo MunguiaDaniel Hartmeier
2002-06-16Remove nat.conf(5) reference.Miod Vallat
2002-06-12fix a typo that could create a fd leakVincent Labrecque
ok beck@
2002-06-11Update man page to reality, grammar, and style fixes. from ckuethe@ualberta.caKjell Wooding
ok beck@
2002-06-11fix breakage from the stupid way theo and I commited that last big pile ofBob Beck
changes.
2002-06-11I broke this. Remove separate (optional) nat callsKjell Wooding
2002-06-08comment and error message cleanup, from Brian Poole <raj@cerias.purdue.edu>Bob Beck
2002-06-07shit. need this. my bad, my pfctl wasn't up to date.Bob Beck
2002-06-07fix a few nits in theo's commit, make this install and run setgid authpfBob Beck
so that it can remove the files it creates in /var/authpf
2002-06-07twist time, space, and other aspects of reality so that we can revoke privs,Theo de Raadt
and... as early as possible. (this does not work, beck has the next half of this coming in a few minutes)