summaryrefslogtreecommitdiff
path: root/usr.sbin/ftp-proxy
AgeCommit message (Expand)Author
2016-02-12Exit early with an error if the "_ftp_proxy" user does not exist. This preventsAntoine Jacoutot
2016-01-04no need for af on divert-to rule; from/ok mikebJason McIntyre
2015-12-22commiting -> committingmmcc
2015-12-04Make the NOPRIV_USER match that is actually intended to be used forSebastian Reitenbach
2015-12-01switch to new _ftp_proxy user; ok dlgTheo de Raadt
2015-01-21Include <netinet/in.h> before <net/pfvar.h>. In a future change whenTheo de Raadt
2015-01-09Document that ftp-proxy breaks explicit RFC4217 FTP TLS. While here,Stefan Sperling
2014-09-13Replace all queue *_END macro calls except CIRCLEQ_END with NULL.Doug Hogan
2013-03-15camield requested backout of rev 1.26, and indeed ftp-proxy does notSebastian Benoit
2013-03-11handle ECONNABORTED errors from accept(). In many code blocks they can beTheo de Raadt
2013-03-10reserve a filedescriptor on accept() for subsequent connect() call, asSebastian Benoit
2012-09-18prio 0 is valid, therefore, I chose an "impossible" value for prio meaningHenning Brauer
2012-07-07rename prio in struct pf_rule and related structs to set_prio so it isHenning Brauer
2012-06-25log all, not log-all; ok henningJason McIntyre
2012-04-30Check for nat_range_high before creating the PF nat rule.Christiano F. Haesbaert
2012-04-05Rate-limit accepting of new connections while we are experiencingCamiel Dobbelaar
2012-03-06catch up with "on rdomain" changes; ok claudioMike Belopuhov
2012-03-04In preparation for getline and getdelim additions to libc, rename getline()Federico G. Schwindt
2011-06-22fix whitespaceStuart Henderson
2011-06-21Convert SO_RTABLE's protocol level to the SOL_SOCKET; ok claudioMike Belopuhov
2011-05-16tweak previous;Jason McIntyre
2011-05-12Make it clear that ftp-proxy needs to make outbound connections.Ryan Thomas McBride
2011-04-28divert-to is picky about the address family so adjust the ruleMike Belopuhov
2011-04-28switch ftp-proxy over to divert-to instead of rdr-to. this avoidsMike Belopuhov
2011-03-25Use the rdomain information returned by DIOCNATLOOK to install theClaudio Jeker
2010-01-13pfr.rule.*.addr.type must be initialized to PF_ADDR_NONE for things thatClaudio Jeker
2010-01-12First pass at removing the 'pf_pool' mechanism for translation and routingRyan Thomas McBride
2009-11-22Move from the PF_RULESET_FILTER world order to PF_TRANS_RULESETTheo de Raadt
2009-11-21If tagging is used use match rules instead of pass rules. This is neededClaudio Jeker
2009-09-07rdr -> rdr-toJason McIntyre
2009-09-01Bring manpage up to speed with the changes that just happend or at leastClaudio Jeker
2009-09-01Bring ftp-proxy in sync with the massive pf change just commited by Henning.Claudio Jeker
2008-06-13Better error messages. Include the function causing the problem and do notClaudio Jeker
2008-04-22Flush output buffers before closing TCP session. Fixes the case whereJoel Knight
2008-04-13Use arc4random_buf() when requesting more than a single word of outputDamien Miller
2008-02-26Don't pass quick when tagging, so the tag can be used outsideHenning Brauer
2007-08-15Some servers / proxies out there like to open the data connectionCamiel Dobbelaar
2007-08-01- -T before -tJason McIntyre
2007-08-01allow ftp-proxy to add tag statements to teh rules it insertsHenning Brauer
2007-05-31convert to new .Dd format;Jason McIntyre
2006-12-30Remove stub write callback functions now that libevent allows them to be NULL.Camiel Dobbelaar
2006-12-30Convert three instances of atoi() to strtonum() and apply sane upper bounds.Camiel Dobbelaar
2006-12-12Ignore sigpipe as libevent does not handle that for us. Confirmed byCamiel Dobbelaar
2006-12-01forgot to update the comment as wellCamiel Dobbelaar
2006-12-01use flags S/SA for consistency with the rest of pfCamiel Dobbelaar
2006-11-26repair missing DPADD requestsTheo de Raadt
2006-10-23no need to use "keep state" and "flags S/SA" in pf rules,Jason McIntyre
2006-10-15Close file descriptors before cleaning up the events, might cause a raceCamiel Dobbelaar
2006-08-30document that ftp-proxy cannot function at a raised securelevelCamiel Dobbelaar
2006-03-25unused variableCamiel Dobbelaar