summaryrefslogtreecommitdiffstats
path: root/contrib/pf
Commit message (Collapse)AuthorAgeFilesLines
* From OpenBSD, rev. 1.379dhartmei2007-05-211-2/+3
| | | | | | | Document how 'allow-opts' applies to routing headers in IPv6. MFC after: 1 week Discussed with: mlaier
* From OpenBSD, rev. 1.91:mlaier2006-11-301-2/+3
| | | | | | | | | fix servicecurve check; no point in checking the same sc three times, it was obviously intended to check all three. has been wrong since the beginning, 4 years... noticed by Earl Lapus <earl.lapus@gmail.com>, Vasil Dimov <vd@FreeBSD.org> mailed me then, ok mcbride MFC after: 3 days
* Mention that we do not support route labels in the BUGS section.mlaier2006-10-301-1/+7
| | | | | PR: docs/93590 Reported by: Niki Denev
* - Note that the synchronisation interface needs to be up and haveglebius2006-06-061-2/+5
| | | | | | | an IP address assigned. - Add "quick" keyword to pf.conf example. PR: docs/85209
* Document authpf's requirement for a mounted fdescfs(5).mlaier2006-03-281-2/+8
| | | | | PR: docs/89635 MFC after: 1 day
* Constfy errstr as it is in OpenBSD to unbreak the build.mlaier2006-03-151-1/+1
| | | | Pointed out by: Suken Woo, Martin Wilke, Wesley Morgan
* Use strtonum now that we have it in libc as well.mlaier2006-03-151-15/+0
|
* Fix build after timeval.tv_sec changed from long to time_t.mlaier2005-12-251-0/+8
|
* Add an rc.d script to start pfsync at the right moment of theyar2005-10-021-2/+21
| | | | | | | | | | | | | system boot, and hook it up in the system. The separate script is needed because in the presence of various interface lists in rc.conf ($network_interfaces, $cloned_interfaces, $sppp_interfaces, $gif_interfaces, more to come) it is hard to start them orderly, so that pfsync is brought up after its syncdev, which is required for the proper startup of pfsync. Discussed with: mlaier on -pf MFC after: 5 days
* Redirect bridge(4) to if_bridge(4). These should have pointed to if_bridgemlaier2005-09-282-3/+3
| | | | | | from the begining. Reminded by: ru
* FreeBSD now supports BIOCLOCK. So we can use it now.csjp2005-08-231-4/+0
| | | | Reviewed by: mlaier
* More tcpdump 8->1 cleanup.brueffer2005-08-063-12/+17
| | | | | Approved by: mlaier MFC after: 3 days
* - Remove MLINKS to nonexistant manpagesbrueffer2005-07-143-6/+8
| | | | | | | - Change some section numbers to match reality - For MLINKS to manpages from ports, mention which port installs them MFC after: 3 days
* Resolve conflicts created during the import of pf 3.7 Some features aremlaier2005-05-0318-1390/+2370
| | | | | | | missing and will be implemented in a second step. This is functional as is. Tested by: freebsd-pf, pfsense.org Obtained from: OpenBSD
* This commit was generated by cvs2svn to compensate for changes in r145837,mlaier2005-05-0312-181/+1839
|\ | | | | | | which included commits to RCS files with non-trunk default branches.
| * Import pf userland from OpenBSD 3.7 (OPENBSD_3_7 as of today)mlaier2005-05-0329-1565/+4187
| |
| * Import pfctl_table.c#1.61 from OpenBSD into vendor branch.mlaier2004-08-221-1/+8
| |
* | - remove OpenBSDisms, add FreeBSDismsglebius2005-02-231-54/+46
| | | | | | | | | | | | | | | | | | | | | | | | - comment out feature, we do not have yet: tcpdumping on pfsync, add a BUGS section - reference carp.4 - dereference bpf(4), tcpdump(7), hostname.if(5) - sort references - tell when pfsync appeared in FreeBSD Reviewed by: mlaier MFC after: 1 week
* | Fix sloppy use of "manpage", bump .Dd where applicable and rename RED tomlaier2005-02-072-4/+4
| | | | | | | | | | | | | | Random Early Detection (not ... Drop) in order to be consistent with other documentation on ALTQ Pointed out by: simon, ru, Brad Davis
* | Be more verbose about altq SYNOPSIS and add more linkage in the relating pfmlaier2005-02-072-0/+10
| | | | | | | | | | | | | | | | documents. Inspired by: scottl Reviewed by: Brad Davis <so14kNOso14kSPAMcom> MFC after: 3 days
* | Fix a reference from pool(9) -> zone(9), but keep on talking about "memorymlaier2004-11-141-1/+1
| | | | | | | | | | | | pools" as that is what UMA provides. Submitted by: Jay <jay NO meangrape SPAM com>
* | Rename the QUEUEING section to QUEUEING/ALTQ to make it easier to find themlaier2004-10-071-2/+2
| | | | | | | | | | | | appropiate section when redirected from ALTQ(4). MFC after: 2 days
* | Make pflogd cope with module unload (and the sudden disappearing of pflog0).mlaier2004-10-051-1/+9
| | | | | | | | | | | | | | Instead of eating all the available CPU we now shutdown gracefully. Submitted by: yongari MFC after: 3 days
* | Document a problem with user/group filtering. With debug.mpsafenet=1 thismlaier2004-10-031-1/+32
| | | | | | | | | | | | | | | | | | | | | | might result in a deadlock. The fix involves critical changes in the PF locking strategy (which will happen after 5.3R). For now advise users to set debug.mpsafenet=0 if they use this kind of filtering. The same problem exists for IPFW. mdoc help from: simon MFC after: 2 days
* | PFIL_HOOKS is no longer an optional item.mlaier2004-09-261-2/+1
| | | | | | | | | | Submitted by: Anders Hanssen MFC after: 1 day
* | Bring in some examples (and create space for future work here):mlaier2004-09-141-3/+4
| | | | | | | | | | | | | | | | | | | | | | | | - Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5) - Tweak the pointer to fit the FreeBSD default location share/examples/pf - Account for the new directory in BSD.usr.dist (no hier(7) change required as share/examples is an opaque item there). Obtained from: OpenBSD Reminded by: Thomas T. Veldhouse PR: docs/71691 MFC after: 2 days
* | Make pflogd(8) store pcap_sf_pkthdr instead of MD timeval contaminatedmlaier2004-08-311-0/+36
| | | | | | | | | | | | | | | | | | | | | | | | pcap_pkthdr. This makes /var/log/pflog standart compliant on 64bit archs. OpenBSD has fixed this by changing the bpf timeval to 32bit in the kernel, so no need to report this over (again). PR: bin/71096 (w/ changes) Submitted by: Ville-Pertti Keinonen Tested by: amd64(submitter), sparc64(yongari), i386(myself) MFC after: 3 days
* | Loopback a fix from Cedric Berger:mlaier2004-08-221-1/+8
| | | | | | | | | | | | | | | | Fix table add/replace commands with securelevel=2. Reported by James J. Lippard. Discussed with: yongari MFC after: 5 days
* | Fix printing of u_int64_t with a cast to unsigned long long.mlaier2004-06-171-1/+1
| | | | | | | | Found-by: tinderbox(amd64)
* | Commit userland part of pf version 3.5 from OpenBSD (OPENBSD_3_5_BASE).mlaier2004-06-1617-839/+2444
| |
* | This commit was generated by cvs2svn to compensate for changes in r130614,mlaier2004-06-1612-170/+925
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Import userland of pf 3.5 from OpenBSD (OPENBSD_3_5_BASE).mlaier2004-06-1627-1036/+3368
| |
* | FreeBSD-ify the manpage. Our inetd does not support bind-address:port syntaxmlaier2004-05-271-1/+3
| | | | | | | | | | | | | | | | Christian will follow up with some additional words about how to protect this from the outside world. Submitted-by: brueffer Approved-by: bms(mentor)
* | FreeBSD-if .4 manpages for pf/pflog/pfsync.mlaier2004-04-183-3/+10
| | | | | | | | | | | | PR: docs/65687 Submitted by: Sergey Matveychuk Approved by: bms(mentor)
* | Fix $FreeBSD$ ids.obrien2004-03-1611-11/+29
| |
* | Fix some style(9) related issues after discussion with/education from bde:mlaier2004-03-1512-118/+94
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - Add <sys/param.h> and <limits.h> where required (do not depend on other headers pulling it in). - __dead -> __dead2 - #if defined() -> #ifdef - Remove ugly PRIu64 macros and use %llu w/ (unsigned long long) cast. All changes looped back to OpenBSD (where applicable) for easier sync in the future. Requested by: bde Approved by: bms(mentor)
* | Fix two instances of improper NULL/0 use idetified by the changes lately.mlaier2004-03-082-2/+2
| | | | | | | | | | Submitted by: Patrick Marie Approved by: bms(mentor)
* | Add local define of HTONL() as it was decided to protect this by _KERNELmlaier2004-02-281-0/+5
| | | | | | | | in <net/pfvar.h>
* | This commit was generated by cvs2svn to compensate for changes in r126357,mlaier2004-02-282-0/+122
|\ \ | |/ | | | | which included commits to RCS files with non-trunk default branches.
| * Missed those two during the original import. Taken from OpenBSD's util.hmlaier2004-02-282-0/+122
| | | | | | | | Approved by: bms(mentor)
* | Apply diff from the port.mlaier2004-02-2810-23/+165
|/ | | | | | | | | | Rather small diff for the userland (in contrast to the kernel): - Some header file location/differences - Clean compilation on 64bit arch (identified by bento a long time ago) - ALTQ not (yet) available. Leave a switch for patchsets and future ... - most files can be used from the vendor branch Approved by: bms(in general)
* Vendor import of OpenBSD's pf userland as of OpenBSD 3.4mlaier2004-02-2827-0/+20141
Approved by: bms(mentor), core(in general)
OpenPOWER on IntegriCloud