Age | Commit message (Expand) | Author |
2021-10-24 | For open/openat, if the flags parameter does not contain O_CREAT, the | Theo de Raadt |
2020-02-12 | Standardize argument naming for "sourceaddr" and unify the wording a bit, | Ingo Schwarze |
2019-06-28 | When system calls indicate an error they return -1, not some arbitrary | Theo de Raadt |
2017-01-15 | fix typo; from semarie | Theo de Raadt |
2016-09-26 | Exit early from rdaemon() is the passed fd is invalid. | Jeremie Courreges-Anglas |
2016-09-15 | Go in the background later, using rdaemon(). | Jeremie Courreges-Anglas |
2016-02-12 | Exit early with an error if the "_ftp_proxy" user does not exist. This prevents | Antoine Jacoutot |
2016-01-04 | no need for af on divert-to rule; from/ok mikeb | Jason McIntyre |
2015-12-22 | commiting -> committing | mmcc |
2015-12-04 | Make the NOPRIV_USER match that is actually intended to be used for | Sebastian Reitenbach |
2015-12-01 | switch to new _ftp_proxy user; ok dlg | Theo de Raadt |
2015-01-21 | Include <netinet/in.h> before <net/pfvar.h>. In a future change when | Theo de Raadt |
2015-01-09 | Document that ftp-proxy breaks explicit RFC4217 FTP TLS. While here, | Stefan Sperling |
2014-09-13 | Replace all queue *_END macro calls except CIRCLEQ_END with NULL. | Doug Hogan |
2013-03-15 | camield requested backout of rev 1.26, and indeed ftp-proxy does not | Sebastian Benoit |
2013-03-11 | handle ECONNABORTED errors from accept(). In many code blocks they can be | Theo de Raadt |
2013-03-10 | reserve a filedescriptor on accept() for subsequent connect() call, as | Sebastian Benoit |
2012-09-18 | prio 0 is valid, therefore, I chose an "impossible" value for prio meaning | Henning Brauer |
2012-07-07 | rename prio in struct pf_rule and related structs to set_prio so it is | Henning Brauer |
2012-06-25 | log all, not log-all; ok henning | Jason McIntyre |
2012-04-30 | Check for nat_range_high before creating the PF nat rule. | Christiano F. Haesbaert |
2012-04-05 | Rate-limit accepting of new connections while we are experiencing | Camiel Dobbelaar |
2012-03-06 | catch up with "on rdomain" changes; ok claudio | Mike Belopuhov |
2012-03-04 | In preparation for getline and getdelim additions to libc, rename getline() | Federico G. Schwindt |
2011-06-22 | fix whitespace | Stuart Henderson |
2011-06-21 | Convert SO_RTABLE's protocol level to the SOL_SOCKET; ok claudio | Mike Belopuhov |
2011-05-16 | tweak previous; | Jason McIntyre |
2011-05-12 | Make it clear that ftp-proxy needs to make outbound connections. | Ryan Thomas McBride |
2011-04-28 | divert-to is picky about the address family so adjust the rule | Mike Belopuhov |
2011-04-28 | switch ftp-proxy over to divert-to instead of rdr-to. this avoids | Mike Belopuhov |
2011-03-25 | Use the rdomain information returned by DIOCNATLOOK to install the | Claudio Jeker |
2010-01-13 | pfr.rule.*.addr.type must be initialized to PF_ADDR_NONE for things that | Claudio Jeker |
2010-01-12 | First pass at removing the 'pf_pool' mechanism for translation and routing | Ryan Thomas McBride |
2009-11-22 | Move from the PF_RULESET_FILTER world order to PF_TRANS_RULESET | Theo de Raadt |
2009-11-21 | If tagging is used use match rules instead of pass rules. This is needed | Claudio Jeker |
2009-09-07 | rdr -> rdr-to | Jason McIntyre |
2009-09-01 | Bring manpage up to speed with the changes that just happend or at least | Claudio Jeker |
2009-09-01 | Bring ftp-proxy in sync with the massive pf change just commited by Henning. | Claudio Jeker |
2008-06-13 | Better error messages. Include the function causing the problem and do not | Claudio Jeker |
2008-04-22 | Flush output buffers before closing TCP session. Fixes the case where | Joel Knight |
2008-04-13 | Use arc4random_buf() when requesting more than a single word of output | Damien Miller |
2008-02-26 | Don't pass quick when tagging, so the tag can be used outside | Henning Brauer |
2007-08-15 | Some servers / proxies out there like to open the data connection | Camiel Dobbelaar |
2007-08-01 | - -T before -t | Jason McIntyre |
2007-08-01 | allow ftp-proxy to add tag statements to teh rules it inserts | Henning Brauer |
2007-05-31 | convert to new .Dd format; | Jason McIntyre |
2006-12-30 | Remove stub write callback functions now that libevent allows them to be NULL. | Camiel Dobbelaar |
2006-12-30 | Convert three instances of atoi() to strtonum() and apply sane upper bounds. | Camiel Dobbelaar |
2006-12-12 | Ignore sigpipe as libevent does not handle that for us. Confirmed by | Camiel Dobbelaar |
2006-12-01 | forgot to update the comment as well | Camiel Dobbelaar |