summaryrefslogtreecommitdiff
path: root/usr.sbin/authpf
AgeCommit message (Collapse)Author
2013-04-02Handle big time_tPhilip Guenther
ok deraadt@
2013-01-19fix build with gcc 2Miod Vallat
2013-01-15Per group support for authpf rules files in /etc/authpf/groups.Bob Beck
largely by Frank Timmers <frankt@smurfnet.eu> with fixups by me and jmc@.
2012-07-07Fix file descriptor leak reported by someone on the mailing list long timeClaudio Jeker
ago. OK beck@
2010-09-02remove trailing spaces and tabs; no binary change.Igor Sobrado
written with help from henning@, who suggested ensuring that there are no changes in the digests for object files, thanks! ok henning@
2010-01-27tweak previous: there was a word missing, but i've just changedJason McIntyre
the wording to match that of a similar piece of text already in this page;
2010-01-27search for authpf.message in $USER dirs alsoTodd T. Fries
from Rafal Bisingier ravbc at man dot pozman dot pl, ok beck@
2009-11-23Make the tree compile again. Henning and I are both quite sure this isClaudio Jeker
correct.
2009-10-26"rdr" -> "match in...rdr-to" in example.Stuart Henderson
2009-09-08Replace remaining occurrence of old PF syntax with "match...nat-to",Stuart Henderson
and just talk about "rules" rather than "filter and translation rules". Spotted by/ok jmc@
2009-09-08Remove some nat-anchor, binat-anchor, rdr-anchor. Noticed by jmc@.Stuart Henderson
ok henning@
2009-01-10Uninitialized variable introduced in 1.110.Miod Vallat
2009-01-10variable declaration before use, found by vax, no cookieTodd T. Fries
2009-01-06Support group and login class in authpf.allow (%<group>, @<class>)Ryan Thomas McBride
ok beck
2008-10-07protect better against races from incoming signals; slightly changedTheo de Raadt
from 5394 by tracking the fd instead of the fp. ok beck
2008-10-05grammar; PR 5394Theo de Raadt
2008-03-18Fix mention of authpf_users table (s/authpf users/authpf_users/).Michael Erdely
ok jmc@, mcbride@
2008-02-14Add authpf-noip, which allows multiple users to connect from a single IP;Ryan Thomas McBride
forces users to write sane rulesets for this by not providing $user_ip or updating the authpf table. testing and prodding by mtu, manpage heavily worked over by jmc ok beck dhartmei henning
2008-02-01Clean anchors recursively and directly via ioctls rather than using pfctlRyan Thomas McBride
with '-f /dev/null'. Properly clears the user's anchor even when anchors are nested inside it (And avoids having to fork() on exit to run pfctl) ok beck@, with testing by mtu@
2007-09-25handle empty strings returned by fgetsCharles Longeau
ok ray@
2007-05-31convert to new .Dd format;Jason McIntyre
2007-02-24exit right away if the config file isn't there, rather thanBob Beck
doing a whole bunch of needless screwing around noticed by Stefan Krah <stefan-usenet@bytereef.org>
2007-02-24license + copyrightBob Beck
2007-02-24Pr 5395 from Stefan Krah <stefan-usenet@bytereef.org>Bob Beck
cleanup: remove unused arg no need to clear locals return -1 to allow pid cleanup to happen if fork fails
2007-02-22this ftruncate is really not needed now, if we're just unlinking.Bob Beck
ok millert@
2007-02-22close 5389 and 5390,Bob Beck
unused variable and a chance to unlink the pidfile without lock if we couldn't kill a preexisting authpf process. spotted by Stefan Krah <sfk1@bigfoot.com>.
2006-10-23no need to use "keep state" and "flags S/SA" in pf rules,Jason McIntyre
now that it is the default; ok henning mcbride camield (ftp-proxy bits) deraadt
2006-08-09handle SIGQUIT instead of SIGSTOP, from Stefan KrahDaniel Hartmeier
2006-03-17FILE * leakTheo de Raadt
2006-03-14fix incorrect sizeof(), spotted by ckuetheBob Beck
ok deraadt@
2006-01-07expand the section on ssh tunnelling machanisms;Jason McIntyre
from michael knudsen
2005-12-12correct err() usage and remove the do_death which is unneeded inBob Beck
the child proceess, (as noticed by <evol@online.ptt.ru>)
2005-12-12Backout previous change back to 1.92 - My fault, committed diffBob Beck
from unclean tree.
2005-12-09Mine, so modernize licenseBob Beck
2005-12-09calling do_death() after err makes us exit is not smart, and is inBob Beck
fact unnecessary, my usage of err() here also repeated the formatted error message twice. - We don't need do_death() here, and fix err to print the message a bit more sanely. Noticed by Andrey Matveev <evol@online.ptt.ru> - Thanks
2005-12-08make authpf give up group privs before exec'ing pfctl - makes itBob Beck
so the new taint enforcement for /dev/fd/X opens don't kill it
2005-09-23default port for ftp-proxy is 8021;Jason McIntyre
from johnb (pr #4520); ok deraadt@ ian@
2005-05-23useless endpwentHenning Brauer
2005-05-12Xr securelevel 7Jason McIntyre
from tamas tevesz;
2005-05-02more setres[ug]id; ok deraadt@Damien Miller
2005-02-10Minor punctuation nit.Joel Knight
ok henning@
2005-01-31warn(3) + _exit(2) instead of err(3) in the forked childHenning Brauer
From: Andrey Matveev <andrushock@korovino.net>
2005-01-31-Wsign-compare clean, Andrey Matveev <andrushock@korovino.net>Henning Brauer
2005-01-04simplified FILTER AND TRANSLATION RULES;Jason McIntyre
from michael knudsen;
2004-09-16ftruncate() with ftello() instead of ftell(); ok millertTheo de Raadt
2004-09-15AllowTcpForwarding should be disabled for authpf users;Jason McIntyre
plus a typo; from michael knudsen; ok beck@
2004-08-15document the use of "authpf/*" as anchor name for pf to processCan Erkin Acar
sub rulesets added by authpf. ok dhartmei@, oh yes! henning@
2004-08-08spacingTheo de Raadt
2004-06-14Use new ioctls. ok beck@ henning@Cedric Berger
2004-06-07consistently refer to the authpf_users table;Jason McIntyre
noticed by die tuere; ok beck@