summaryrefslogtreecommitdiffstats
path: root/sbin/ipfw
Commit message (Collapse)AuthorAgeFilesLines
...
* Correct definition of 'established' keyword.alex1996-07-021-1/+1
|
* Formatting fixes for 'in' and 'out' while listing.alex1996-06-291-22/+32
| | | | | | | Prevent ALL protocol from being used with port specifications. Allow 'via' keyword at any point in the options list. Disallow multiple 'via' specifications.
* Fix port specification syntax.alex1996-06-291-1/+1
| | | | Submitted by: nate
* Fix address mask calculation when using ':' syntax. Allow a maskalex1996-06-231-13/+23
| | | | | | | | of /0 to have the desired effect. Normalize IP addresses that won't match a given mask (i.e. 1.2.3.4/24 becomes 1.2.3.0/24). Submitted by R. Bezuidenhout <rbezuide@mikom.csir.co.za> Code formatting and "frag" display fixes.
* Set the program name before trying to use it.alex1996-06-181-3/+3
| | | | Found by: Aage Robekk <aagero@aage.priv.no>
* Fix a typo in the view accounting records example.alex1996-06-151-1/+1
|
* Bring the man page more into line with reality.alex1996-06-151-259/+94
|
* Big sweep over ipfw, picking up where Poul left off:alex1996-06-091-23/+197
| | | | | | | | | | | | | | | - Filter based on ICMP types. - Accept interface wildcards (e.g. ppp*). - Resolve service names with the -N option. - Accept host names in 'from' and 'to' specifications - Display chain entry time stamps with the -t option. - Added URG to tcpflags. - Print usage if an unknown tcpflag is used. - Ability to zero individual accounting entries. - Clarify usage of port ranges. - Misc code cleanup. Closes PRs: 1193, 1220, and 1266.
* Some cosmetics and some better error-checking.phk1996-05-111-46/+43
| | | | | | Reviewed by: phk Submitted by: "Daniel O'Callaghan" <danny@panda.hilink.com.au> Submitted by: Archie Cobbs <archie@whistle.com>
* recognize "allow", "accept" and "pass"phk1996-04-031-6/+8
| | | | add new feature for "established"
* A couple of bug-fixes.phk1996-04-021-4/+4
| | | | | Reviewed by: phk Submitted by: "Frank ten Wolde" <franky@pinewood.nl>
* Update to match kernel code.phk1996-02-243-100/+252
|
* A new ipfw program that can set and control the new features.phk1996-02-242-969/+400
| | | | An almost correct usage is printed.
* Update -current ipfw program as well.phk1996-02-232-170/+29
| | | | I hope it all compiles...
* Document that the firewall will no longer reorder the rules.phk1996-02-131-3/+8
|
* Fix a bunch of spelling errors.mpp1996-01-291-3/+3
|
* This commit was generated by cvs2svn to compensate for changes in r13122,peter1995-12-301-610/+0
| | | | which included commits to RCS files with non-trunk default branches.
* recording cvs-1.6 file deathpeter1995-12-302-733/+0
|
* Convert manpage to -mandoc macros.nate1995-10-261-130/+307
| | | | | | Submitted by: Gary Palmer <gary@palmer.demon.co.uk> Minor cleanup by me in the English.
* Support all the tcpflag options in firewall.ugen1995-10-231-33/+215
| | | | | | Add reading options from file, now ipfw <filename> will read commands string after string from file , form of strings same as command line interface.
* Support IP Option smatching in grammar and listing.ugen1995-10-011-30/+130
| | | | | TcpSyn option removed and will be shortly repoaced by support of all TCP Flags including syn and ack...
* Correct minor nit - to filter out SYN packets, the keyword isgpalmer1995-08-311-1/+1
| | | | | `syn' not `tcpsyn' (which matches `tcp' which blocks all tcp packets)
* Add $Id$gpalmer1995-08-221-0/+3
|
* Remove trailing whitespace.rgrimes1995-05-301-38/+38
|
* make pass work also as the first keywordugen1995-03-301-1/+1
| | | | | | | (while addf skipped) Reviewed by: Submitted by: Obtained from:
* Update manpage..BTW,if somebody wit good Englishugen1995-03-031-8/+21
| | | | would go through it and fix it would be a really good idea.
* Oops..remove some debugging leftover..ugen1995-03-031-1/+0
|
* Ok..so everybody picking on me that ipfw syntacsugen1995-03-031-106/+172
| | | | | | | | | | | is a pain in ...wel.. trying to fix this * from/to/via position indepenndant syntax * "any" for 0/0 host address * addf/addb default keyword in case you skip it.. * pass = accept new action, seems to be somewhat better in particular cases * on = via (as on ed0 instead of via ed0,loook at reject tcp on ed0 from hacker )
* Fixed manpage..ldeny,lreject and log options are thereugen1995-02-271-3/+2
| | | | | and others not.. Submitted by: torstenb@FreeBSD.ORG
* Change utility to accept interface nameugen1995-02-242-10/+59
| | | | along with IP as "via" argument
* ipfirewall.4 is obviously not here anymore! Adjust the Makefile.jkh1995-02-181-2/+0
|
* Finally document "via" feature..ugen1995-02-171-5/+9
|
* Ppl asked to make ipfw smarter..ok..ugen1995-02-141-3/+3
| | | | here it is..
* Fix for rather stupid bug by which you couldn't setugen1995-02-141-3/+4
| | | | | | ports for the destination IP addr/port. Nobody reported this btw , while a lot of other things reported- probably ppl does not use destination ports at all????
* Ok..at least this man page is up to date nowugen1995-02-091-67/+63
| | | | To be continued..
* Utility changes following the facility.ugen1995-01-121-53/+20
| | | | | | We have only one firewall chain and one accounting chain now. No blocking/forwarding so commands changed. Man pages are somewhat out of date and will be updated ASAP.
* Add interface to clear accounting entry option.ugen1994-12-131-82/+80
| | | | Reflect ip_fw structure changes.
* Add via option,minor changes to interface to reflectugen1994-12-121-16/+56
| | | | internal firewall changes.Check option disabled temporary.
* Changed a reboot(1) to a reboot(8).ats1994-12-111-1/+1
|
* Interface changes to support additions to firewall.ugen1994-11-281-31/+88
|
* G-d help me to do it right first time....ugen1994-11-201-2/+2
| | | | Minor patch to man page,test.
* New man pages from Ugen. Delete my old, first attempt. I only hopejkh1994-11-173-0/+338
| | | | | | | | that the english in Ugen's two replacement pages is not too impenetrable! :-) [Note: Poul - please pull these into the BETA branch along with the other firewall changes] Submitted by: ugen
* Latest from Ugen J.S.Antsilevich" <ugen@NetVision.net.il>. Poul, pleasejkh1994-11-161-842/+788
| | | | | take this into BETA. Submitted by: ugen
* More 12th hour fixes from Ugen.jkh1994-11-081-65/+66
| | | | Submitted by: ugen
* Latest changes from Uben.jkh1994-10-311-12/+26
| | | | Submitted by: uben
* Fix up the man page a little more, delete the README that crept injkh1994-10-281-0/+3
| | | | (but I'm actually just as happy to have in the attic, for reference).
* This commit was generated by cvs2svn to compensate for changes in r3965,jkh1994-10-282-0/+1134
|\ | | | | | | which included commits to RCS files with non-trunk default branches.
| * Add the ipfw command, for IP firewall construction.jkh1994-10-282-0/+1134
| | | | Submitted by: danny ugen
* Add the ipfw command, for IP firewall construction.jkh1994-10-282-0/+1011
Submitted by: danny ugen
OpenPOWER on IntegriCloud