summaryrefslogtreecommitdiffstats
path: root/etc/rc.firewall
Commit message (Expand)AuthorAgeFilesLines
* Allow the network addresses and interface names for the "client" andjhb2008-08-151-6/+15
* For the "client" and "simple" network types, collapse the separate "net"jhb2008-08-151-14/+11
* Use 'me' rather than explicit IP addresses for the "simple" and "client"jhb2008-08-151-12/+9
* - back out my last commit as it seems to be wrong.danger2008-08-031-2/+0
* - dns queries might go also over TCP, so allow it.danger2008-07-171-0/+2
* Tweak rc.firewall to allow incoming limited broadcast traffic,keramida2008-06-061-0/+3
* Improve kernel NAT support in rc.firewallrafan2008-01-211-1/+7
* o Correct an info about "Firewalls and Internet Security" book: name,maxim2008-01-121-7/+6
* s/IPFW(4)/ipfw(4) to match the actual man page name.rwatson2007-04-051-1/+1
* In rc.firewall, make it clear that this is the setup for IPFW(4), and notrwatson2007-04-021-1/+1
* Summer of Code 2005: improve libalias - part 2 of 2piso2006-12-291-0/+8
* Give rc.firewall a polish and a new method.phk2006-10-281-16/+107
* don't match packets other than IPv4 against divert rule.ume2005-11-181-1/+1
* DNS should not necessarily be named(8), tweak the comment a bit.ru2003-11-021-1/+1
* Add a header: #!/bin/sh.trhodes2003-02-061-0/+1
* Bring rc.firewall{,6} more in line with the word and spirit ofcjc2002-02-211-7/+17
* Remove a stale entry related to passing ARP with bridging and ipfw.luigi2001-12-271-2/+0
* Sync the code that sucks in rc.conf and friends with what's indd2001-08-141-5/+7
* style nitobrien2001-03-061-1/+1
* Also deny 127.0.0.0/8 going out.obrien2001-03-051-1/+2
* Fix references to Chapman & Zwicky and Cheswick & Bellowin.des2001-02-251-3/+5
* Fix some glaring insecurities in the prototype firewall configurations.nsayer2001-02-201-8/+4
* Add copyright notices. Other systems have been barrowing our /etc filesobrien2000-10-081-2/+29
* Only install `divert natd' rule for predefined firewall types,ru2000-08-301-3/+1
* Make natd(8) "compatible" with firewall_type="simple".ru2000-08-041-17/+46
* Update rev 1.29 -- 'draft-manning-dsua' is now in its 3rd version.obrien2000-07-301-1/+3
* Add an explicit rule number to natd so you do not end up with twops2000-05-081-1/+1
* Add to defaults/rc.conf a new function source_rc_confs which rcsheldonh2000-04-271-0/+1
* Back out the hook to execute the file ${firewall_type}. The intendedbsd2000-04-271-3/+1
* Allow the firewall rules to be established by a shell script insteadbsd2000-04-161-1/+3
* Add a firewall_flags option that is used when ipfw processes a file. It allowspaul2000-02-061-1/+1
* Update this with the additional nets recomended by readingrgrimes2000-01-281-14/+26
* Minor whitespace fix.obrien1999-12-041-2/+1
* Pass IP fragments with non-zero offset. The semantics of matchingru1999-11-041-0/+6
* Add commented entry to the lo0 section inviting bridge users tonsayer1999-10-241-0/+2
* Allow for incoming DNS UDP queries.ru1999-10-201-0/+2
* Fix a typo in a comment.mpp1999-09-301-1/+1
* Apply a consistent style to most of the etc scripts. Particularly, usesheldonh1999-09-131-115/+138
* $Id$ -> $FreeBSD$peter1999-08-271-1/+1
* Style clean-up:sheldonh1999-08-251-39/+39
* Use /etc/defaults/rc.conf everywhere, falling back to /etc/rc.confjkh1999-02-101-2/+5
* Strengthen the rules governing the 127.0.0.0/8 subnet. The previous rulesalex1998-04-251-3/+3
* Add natd support.brian1998-04-181-1/+10
* Better RFC1918 network protectionphk1998-04-151-1/+4
* get default firewall type from rc.confadam1998-02-101-1/+5
* MF22 - make firewall_type a little more robustdanny1997-10-211-9/+6
* Fix some problems in the rules file loading and need for modload detection.danny1997-09-181-2/+2
* Reviewed by: msmith, alexdanny1997-09-111-44/+60
* Add inetd_flags and way of passing ipfw a configuration filejkh1997-05-051-4/+9
* Update the etc world from RELENG_2_2 which is now more up-to-datejkh1997-05-031-5/+3
OpenPOWER on IntegriCloud