| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
| |
missing and will be implemented in a second step. This is functional as is.
Tested by: freebsd-pf, pfsense.org
Obtained from: OpenBSD
|
|\
| |
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- comment out feature, we do not have yet: tcpdumping on pfsync,
add a BUGS section
- reference carp.4
- dereference bpf(4), tcpdump(7), hostname.if(5)
- sort references
- tell when pfsync appeared in FreeBSD
Reviewed by: mlaier
MFC after: 1 week
|
| |
| |
| |
| |
| |
| |
| | |
Random Early Detection (not ... Drop) in order to be consistent with other
documentation on ALTQ
Pointed out by: simon, ru, Brad Davis
|
| |
| |
| |
| |
| |
| |
| |
| | |
documents.
Inspired by: scottl
Reviewed by: Brad Davis <so14kNOso14kSPAMcom>
MFC after: 3 days
|
| |
| |
| |
| |
| |
| | |
pools" as that is what UMA provides.
Submitted by: Jay <jay NO meangrape SPAM com>
|
| |
| |
| |
| |
| |
| | |
appropiate section when redirected from ALTQ(4).
MFC after: 2 days
|
| |
| |
| |
| |
| |
| |
| | |
Instead of eating all the available CPU we now shutdown gracefully.
Submitted by: yongari
MFC after: 3 days
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
might result in a deadlock. The fix involves critical changes in the PF
locking strategy (which will happen after 5.3R). For now advise users to set
debug.mpsafenet=0 if they use this kind of filtering.
The same problem exists for IPFW.
mdoc help from: simon
MFC after: 2 days
|
| |
| |
| |
| |
| | |
Submitted by: Anders Hanssen
MFC after: 1 day
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5)
- Tweak the pointer to fit the FreeBSD default location share/examples/pf
- Account for the new directory in BSD.usr.dist (no hier(7) change required
as share/examples is an opaque item there).
Obtained from: OpenBSD
Reminded by: Thomas T. Veldhouse
PR: docs/71691
MFC after: 2 days
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
pcap_pkthdr. This makes /var/log/pflog standart compliant on 64bit archs.
OpenBSD has fixed this by changing the bpf timeval to 32bit in the kernel,
so no need to report this over (again).
PR: bin/71096 (w/ changes)
Submitted by: Ville-Pertti Keinonen
Tested by: amd64(submitter), sparc64(yongari), i386(myself)
MFC after: 3 days
|
| |
| |
| |
| |
| |
| |
| |
| | |
Fix table add/replace commands with securelevel=2.
Reported by James J. Lippard.
Discussed with: yongari
MFC after: 5 days
|
| |
| |
| |
| | |
Found-by: tinderbox(amd64)
|
| | |
|
|\ \
| |/
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
Christian will follow up with some additional words about how to protect
this from the outside world.
Submitted-by: brueffer
Approved-by: bms(mentor)
|
| |
| |
| |
| |
| |
| | |
PR: docs/65687
Submitted by: Sergey Matveychuk
Approved by: bms(mentor)
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- Add <sys/param.h> and <limits.h> where required (do not depend on other
headers pulling it in).
- __dead -> __dead2
- #if defined() -> #ifdef
- Remove ugly PRIu64 macros and use %llu w/ (unsigned long long) cast.
All changes looped back to OpenBSD (where applicable) for easier sync in the
future.
Requested by: bde
Approved by: bms(mentor)
|
| |
| |
| |
| |
| | |
Submitted by: Patrick Marie
Approved by: bms(mentor)
|
| |
| |
| |
| | |
in <net/pfvar.h>
|
|\ \
| |/
| |
| | |
which included commits to RCS files with non-trunk default branches.
|
| |
| |
| |
| | |
Approved by: bms(mentor)
|
|/
|
|
|
|
|
|
|
|
| |
Rather small diff for the userland (in contrast to the kernel):
- Some header file location/differences
- Clean compilation on 64bit arch (identified by bento a long time ago)
- ALTQ not (yet) available. Leave a switch for patchsets and future ...
- most files can be used from the vendor branch
Approved by: bms(in general)
|
|
Approved by: bms(mentor), core(in general)
|