Age | Commit message (Expand) | Author |
2014-09-13 | Replace all queue *_END macro calls except CIRCLEQ_END with NULL. | Doug Hogan |
2013-03-15 | camield requested backout of rev 1.26, and indeed ftp-proxy does not | Sebastian Benoit |
2013-03-11 | handle ECONNABORTED errors from accept(). In many code blocks they can be | Theo de Raadt |
2013-03-10 | reserve a filedescriptor on accept() for subsequent connect() call, as | Sebastian Benoit |
2012-09-18 | prio 0 is valid, therefore, I chose an "impossible" value for prio meaning | Henning Brauer |
2012-07-07 | rename prio in struct pf_rule and related structs to set_prio so it is | Henning Brauer |
2012-06-25 | log all, not log-all; ok henning | Jason McIntyre |
2012-04-30 | Check for nat_range_high before creating the PF nat rule. | Christiano F. Haesbaert |
2012-04-05 | Rate-limit accepting of new connections while we are experiencing | Camiel Dobbelaar |
2012-03-06 | catch up with "on rdomain" changes; ok claudio | Mike Belopuhov |
2012-03-04 | In preparation for getline and getdelim additions to libc, rename getline() | Federico G. Schwindt |
2011-06-22 | fix whitespace | Stuart Henderson |
2011-06-21 | Convert SO_RTABLE's protocol level to the SOL_SOCKET; ok claudio | Mike Belopuhov |
2011-05-16 | tweak previous; | Jason McIntyre |
2011-05-12 | Make it clear that ftp-proxy needs to make outbound connections. | Ryan Thomas McBride |
2011-04-28 | divert-to is picky about the address family so adjust the rule | Mike Belopuhov |
2011-04-28 | switch ftp-proxy over to divert-to instead of rdr-to. this avoids | Mike Belopuhov |
2011-03-25 | Use the rdomain information returned by DIOCNATLOOK to install the | Claudio Jeker |
2010-01-13 | pfr.rule.*.addr.type must be initialized to PF_ADDR_NONE for things that | Claudio Jeker |
2010-01-12 | First pass at removing the 'pf_pool' mechanism for translation and routing | Ryan Thomas McBride |
2009-11-22 | Move from the PF_RULESET_FILTER world order to PF_TRANS_RULESET | Theo de Raadt |
2009-11-21 | If tagging is used use match rules instead of pass rules. This is needed | Claudio Jeker |
2009-09-07 | rdr -> rdr-to | Jason McIntyre |
2009-09-01 | Bring manpage up to speed with the changes that just happend or at least | Claudio Jeker |
2009-09-01 | Bring ftp-proxy in sync with the massive pf change just commited by Henning. | Claudio Jeker |
2008-06-13 | Better error messages. Include the function causing the problem and do not | Claudio Jeker |
2008-04-22 | Flush output buffers before closing TCP session. Fixes the case where | Joel Knight |
2008-04-13 | Use arc4random_buf() when requesting more than a single word of output | Damien Miller |
2008-02-26 | Don't pass quick when tagging, so the tag can be used outside | Henning Brauer |
2007-08-15 | Some servers / proxies out there like to open the data connection | Camiel Dobbelaar |
2007-08-01 | - -T before -t | Jason McIntyre |
2007-08-01 | allow ftp-proxy to add tag statements to teh rules it inserts | Henning Brauer |
2007-05-31 | convert to new .Dd format; | Jason McIntyre |
2006-12-30 | Remove stub write callback functions now that libevent allows them to be NULL. | Camiel Dobbelaar |
2006-12-30 | Convert three instances of atoi() to strtonum() and apply sane upper bounds. | Camiel Dobbelaar |
2006-12-12 | Ignore sigpipe as libevent does not handle that for us. Confirmed by | Camiel Dobbelaar |
2006-12-01 | forgot to update the comment as well | Camiel Dobbelaar |
2006-12-01 | use flags S/SA for consistency with the rest of pf | Camiel Dobbelaar |
2006-11-26 | repair missing DPADD requests | Theo de Raadt |
2006-10-23 | no need to use "keep state" and "flags S/SA" in pf rules, | Jason McIntyre |
2006-10-15 | Close file descriptors before cleaning up the events, might cause a race | Camiel Dobbelaar |
2006-08-30 | document that ftp-proxy cannot function at a raised securelevel | Camiel Dobbelaar |
2006-03-25 | unused variable | Camiel Dobbelaar |
2006-03-22 | Rework signal handling the idiomatic libevent way. From ospfd. | Camiel Dobbelaar |
2005-11-20 | .Sh SECURITY -> .Sh CAVEATS | Jason McIntyre |
2005-11-18 | don't assume that close() can fail, from deraadt | Camiel Dobbelaar |
2005-11-17 | buffer overflow | Theo de Raadt |
2005-06-07 | add OpenBSD cvs tags, prompted by xsa@ | Camiel Dobbelaar |
2005-06-07 | Introduce verbose option to control the logging of the pf rules. | Camiel Dobbelaar |
2005-05-31 | tweaks; | Jason McIntyre |