| Commit message (Expand) | Author | Age | Files | Lines |
* | The client type rule allows DHCP, implicitly. Since DHCPv6 uses | ume | 2010-01-09 | 1 | -0/+2 |
* | Since the IPv4 rule allows ICMP_TIMXCEED, allow | ume | 2010-01-07 | 1 | -1/+4 |
* | Add missing me6 rules. Now, the IPv6 rules become equivalent | ume | 2009-12-29 | 1 | -0/+29 |
* | Unify rc.firewall and rc.firewall6, and obsolete rc.firewall6 | ume | 2009-12-02 | 1 | -10/+146 |
* | Allow the network addresses and interface names for the "client" and | jhb | 2008-08-15 | 1 | -6/+15 |
* | For the "client" and "simple" network types, collapse the separate "net" | jhb | 2008-08-15 | 1 | -14/+11 |
* | Use 'me' rather than explicit IP addresses for the "simple" and "client" | jhb | 2008-08-15 | 1 | -12/+9 |
* | - back out my last commit as it seems to be wrong. | danger | 2008-08-03 | 1 | -2/+0 |
* | - dns queries might go also over TCP, so allow it. | danger | 2008-07-17 | 1 | -0/+2 |
* | Tweak rc.firewall to allow incoming limited broadcast traffic, | keramida | 2008-06-06 | 1 | -0/+3 |
* | Improve kernel NAT support in rc.firewall | rafan | 2008-01-21 | 1 | -1/+7 |
* | o Correct an info about "Firewalls and Internet Security" book: name, | maxim | 2008-01-12 | 1 | -7/+6 |
* | s/IPFW(4)/ipfw(4) to match the actual man page name. | rwatson | 2007-04-05 | 1 | -1/+1 |
* | In rc.firewall, make it clear that this is the setup for IPFW(4), and not | rwatson | 2007-04-02 | 1 | -1/+1 |
* | Summer of Code 2005: improve libalias - part 2 of 2 | piso | 2006-12-29 | 1 | -0/+8 |
* | Give rc.firewall a polish and a new method. | phk | 2006-10-28 | 1 | -16/+107 |
* | don't match packets other than IPv4 against divert rule. | ume | 2005-11-18 | 1 | -1/+1 |
* | DNS should not necessarily be named(8), tweak the comment a bit. | ru | 2003-11-02 | 1 | -1/+1 |
* | Add a header: #!/bin/sh. | trhodes | 2003-02-06 | 1 | -0/+1 |
* | Bring rc.firewall{,6} more in line with the word and spirit of | cjc | 2002-02-21 | 1 | -7/+17 |
* | Remove a stale entry related to passing ARP with bridging and ipfw. | luigi | 2001-12-27 | 1 | -2/+0 |
* | Sync the code that sucks in rc.conf and friends with what's in | dd | 2001-08-14 | 1 | -5/+7 |
* | style nit | obrien | 2001-03-06 | 1 | -1/+1 |
* | Also deny 127.0.0.0/8 going out. | obrien | 2001-03-05 | 1 | -1/+2 |
* | Fix references to Chapman & Zwicky and Cheswick & Bellowin. | des | 2001-02-25 | 1 | -3/+5 |
* | Fix some glaring insecurities in the prototype firewall configurations. | nsayer | 2001-02-20 | 1 | -8/+4 |
* | Add copyright notices. Other systems have been barrowing our /etc files | obrien | 2000-10-08 | 1 | -2/+29 |
* | Only install `divert natd' rule for predefined firewall types, | ru | 2000-08-30 | 1 | -3/+1 |
* | Make natd(8) "compatible" with firewall_type="simple". | ru | 2000-08-04 | 1 | -17/+46 |
* | Update rev 1.29 -- 'draft-manning-dsua' is now in its 3rd version. | obrien | 2000-07-30 | 1 | -1/+3 |
* | Add an explicit rule number to natd so you do not end up with two | ps | 2000-05-08 | 1 | -1/+1 |
* | Add to defaults/rc.conf a new function source_rc_confs which rc | sheldonh | 2000-04-27 | 1 | -0/+1 |
* | Back out the hook to execute the file ${firewall_type}. The intended | bsd | 2000-04-27 | 1 | -3/+1 |
* | Allow the firewall rules to be established by a shell script instead | bsd | 2000-04-16 | 1 | -1/+3 |
* | Add a firewall_flags option that is used when ipfw processes a file. It allows | paul | 2000-02-06 | 1 | -1/+1 |
* | Update this with the additional nets recomended by reading | rgrimes | 2000-01-28 | 1 | -14/+26 |
* | Minor whitespace fix. | obrien | 1999-12-04 | 1 | -2/+1 |
* | Pass IP fragments with non-zero offset. The semantics of matching | ru | 1999-11-04 | 1 | -0/+6 |
* | Add commented entry to the lo0 section inviting bridge users to | nsayer | 1999-10-24 | 1 | -0/+2 |
* | Allow for incoming DNS UDP queries. | ru | 1999-10-20 | 1 | -0/+2 |
* | Fix a typo in a comment. | mpp | 1999-09-30 | 1 | -1/+1 |
* | Apply a consistent style to most of the etc scripts. Particularly, use | sheldonh | 1999-09-13 | 1 | -115/+138 |
* | $Id$ -> $FreeBSD$ | peter | 1999-08-27 | 1 | -1/+1 |
* | Style clean-up: | sheldonh | 1999-08-25 | 1 | -39/+39 |
* | Use /etc/defaults/rc.conf everywhere, falling back to /etc/rc.conf | jkh | 1999-02-10 | 1 | -2/+5 |
* | Strengthen the rules governing the 127.0.0.0/8 subnet. The previous rules | alex | 1998-04-25 | 1 | -3/+3 |
* | Add natd support. | brian | 1998-04-18 | 1 | -1/+10 |
* | Better RFC1918 network protection | phk | 1998-04-15 | 1 | -1/+4 |
* | get default firewall type from rc.conf | adam | 1998-02-10 | 1 | -1/+5 |
* | MF22 - make firewall_type a little more robust | danny | 1997-10-21 | 1 | -9/+6 |