CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/09/01 07:43:15
Modified files:
share/man/man5 : pf.conf.5
Log message:
document new pf. mostly from igor, input and bnf by me
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/09/01 07:44:01
Modified files:
share/man/man4 : pf.4
Log message:
i have no idea who smuggled this in my tree but it is right
(adopt for new pf)
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/09/01 07:51:19
Modified files:
etc: pf.conf
Log message:
todd reminded me we need to adjust this too
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/08/12 09:58:20
Modified files:
sys/net: if.c
Log message:
dlg deferred calling interfaces' if_start routine so we call them less,
which does pay out, performance wise. one of the conditions to
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/08/12 15:44:49
Modified files:
sys/kern : uipc_mbuf.c
Log message:
just bzero the pkthdr instead of setting each and every member of that
struct to 0/NULL. no performance impact but way less
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/08/12 16:15:53
Modified files:
usr.bin/mg : theo.c
Log message:
i am sorry to commit to userland from a kernel hackathon
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/08/10 05:48:02
Modified files:
sys/netinet: ip_input.c
Log message:
this is basically a fixed version of r1.165, avoid m_copym of each and every
forwarded packet in case ip_output returns an error
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/08/10 07:20:08
Modified files:
sys/netinet: ip_input.c
Log message:
fix previous:
-m_copydata istead of straight bcopy. noticed by damien
-handle the pretty much impossible case that the packet
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/08/10 09:26:34
Modified files:
sys/netinet: ip_input.c
Log message:
we need to null mcopy, gotos bite. theo and i both missed them, theo ok
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/08/10 09:29:34
Modified files:
sys/netinet: ip_input.c
Log message:
7 years of
#if 1
reasonable
#else
bullshit required by some committee
#endif
are enough. theo ok
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/08/09 06:47:50
Modified files:
sys/netinet: ipsec_input.c
Log message:
once again ipsec tries to be clever and plays fast, this time by
recycling an mbuf tag and changing its type. just always get
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/08/09 06:51:08
Modified files:
sys/sys: mbuf.h
Log message:
16 bits are enough for tagsset
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/08/09 06:50:09
Modified files:
sys/kern : uipc_mbuf.c uipc_mbuf2.c
sys/sys: mbuf.h
Log message:
make mbuf tags suck a bit less, performance wise.
the most common operation is
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/08/09 07:53:03
Modified files:
sys/sys: mbuf.h
Log message:
no point in clearing/re-initing packet header fields in a non-packet-header
mbuf. ok claudio theo
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/08/09 12:45:30
Modified files:
sys/sys: mbuf.h
Log message:
kill M_DUP_HDR. M_DUP_PKTHDR was the only user, we can just put the
3 lines of code in there directly, and we hate the M_ macros
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/08/08 04:41:41
Modified files:
sys/conf : Tag: OPENBSD_4_6 newvers.sh
Log message:
reveal identidy
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/08/06 05:15:18
Modified files:
sys/net: Tag: OPENBSD_4_6 pf.c
Log message:
MFC, ok deraadt
revision 1.656
date: 2009/07/28 11:20:09; author: henning; state: Exp;
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/07/28 05:20:09
Modified files:
sys/net: pf.c
Log message:
check that pool_get actually gives us memory in pf_test_rule.
introduced by yours truly (no idea how that could happpen), problem
found
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/07/28 05:22:33
Modified files:
sys/net: pf.c
Log message:
do not leak pf_rule_item_pl items in pf_test_rule() when
1) at least one match rule matched the packet and
2) we do not create state
also means that people updating a port have to maintain
current.html if manual steps are to be done on/after/before
pkg_add -ui now.
basically, pkg_add -ui + current.html/upgradeXX.html = no surprises.
--
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/07/21 05:49:36
Modified files:
usr.sbin/bgpctl: bgpctl.c
Log message:
sorry, but showing a diff, getting an explicit not ok and then committing
anyway without oks is not our process
* Claudio Jeker clau...@cvs.openbsd.org [2009-07-21 15:13]:
On Tue, Jul 21, 2009 at 05:49:36AM -0600, Henning Brauer wrote:
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/07/21 05:49:36
Modified files:
usr.sbin/bgpctl: bgpctl.c
Log message
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/07/21 08:48:08
Modified files:
sys/net: pf_norm.c
Log message:
pf_scrub_ip/ip6 prototypes are already in pfvar.h
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/07/09 17:52:25
Modified files:
sbin/pfctl : pfctl.c
Log message:
repair -x
since all this stuff is transactional now we need to wrap that into
DIOCXBEGIN/COMMIT.
bad henning forgot to commit this
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/06/24 11:34:32
Modified files:
usr.sbin/ntpd : client.c
Log message:
recvmsg ENOENT noncritical too
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/06/19 08:05:32
Modified files:
sbin/ifconfig : ifconfig.8 ifconfig.c
Log message:
after long discussion with many...
ifconfig if inet6 used to print all inet6 addresses, and last not least
the
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/06/11 11:36:53
Modified files:
usr.sbin/ntpd : ntp.c
Log message:
effectively un-do r1.111, it fucks machines with bad clocks royally.
spotted the hard way by theo on armish, pinned to this changed by
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/06/07 18:50:30
Modified files:
sys/net: pfvar.h
Log message:
unfuck PF_AEQ PF_ANEQ PF_AZERO macos that got fucked when v6 support
was added in 2001. yes i got bitten by inet6 shit again.
in the
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/06/07 19:55:42
Modified files:
sys/net: pfvar.h
Log message:
gah. something is not quite right, sthen sees strange behaviour fixed
by backing out the macro fix. something must rely on the
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/06/07 20:39:15
Modified files:
sys/net: pfvar.h
Log message:
bring back the fixed PF_AEQ/ANEQ/AZERO macros, the offending use has been
found by sthen and fixed, all other callers of these
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/06/07 21:56:14
Modified files:
sys/net: pf.c
Log message:
in pf_print_state_parts, do not use skw-proto to print the protocol
but our local copy proto that we very carefully set beforehands.
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/06/04 13:07:21
Modified files:
sys/net: if.c if.h
sys/netinet6 : in6.c
sys/sys: sockio.h
sbin/ifconfig : ifconfig.c
Log message:
allow IPvShit to be turned
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/06/04 13:15:26
Modified files:
sbin/ifconfig : ifconfig.8
Log message:
i care about theo's hydration level. make him stop whining by documenting
inet6/-inet6
ports who don't use getaddrinfo
right.
yay!
ok deraadt@, plenty of cheering in the room wrt the idea, not loud
enough complaining from the v6 crowd.
two ppl makes a crowd?
--
Henning Brauer, h...@bsws.de, henn...@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/06/04 16:45:32
Modified files:
usr.sbin/rtsold: if.c
Log message:
turn ipvcrap on on the interface in question. sake bottle pushed by theo,
tested by naddy
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/06/03 23:02:25
Modified files:
sys/netinet: ip_input.c
Log message:
the decision on wether a packet is to be delivered locally or forwarded
is pretty expensive, the more the more addresses are
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/06/01 17:21:09
Modified files:
usr.sbin/ntpd : ntpd.c
Log message:
no we don't need endpwent
i remember we already had the confusion and bgpd doesn't have the endpwent
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/06/01 17:22:58
Modified files:
usr.sbin/dvmrpd: dvmrpd.c rde.c
Log message:
no endpwent
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/05/31 13:16:16
Modified files:
etc: rc.conf
Log message:
enable pf by default.
turns bombs into flowers, water into beer and eradicts swine flu
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/05/30 16:18:15
Modified files:
etc: pf.conf
Log message:
shorter, ok theo
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/05/20 08:55:59
Modified files:
usr.sbin/ntpd : server.c
Log message:
fix looking at the mode bits so that we do not reply to broadcast and other
junk. from thorsten glaser.
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/30 06:54:32
Modified files:
sys/net: pf.c
Log message:
treat log as what it is, a flag variable. effectively a noop now but stops
us relying on where we are setting it. ok ryan dlg
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/25 13:29:54
Modified files:
sbin/pfctl : parse.y
Log message:
scrub_opts must not be empty, scrub on its own does nothing.
noticed due to a question from otto@, ok regress/sbin/pfctl/ ;)
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/21 07:57:14
Modified files:
usr.sbin/bgpd : pfkey.c
Log message:
ignore pfkey replies not for us and discard them
From: Matthew Dempsky matt...@dempsky.org
markus and hshoexer and claudio agree
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/21 09:25:52
Modified files:
usr.sbin/bgpd : pfkey.c
Log message:
instead of calling getpid() all over the place do it once, claudio ok
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/17 11:17:03
Modified files:
etc: rc
Log message:
a scrub was hiding here when nfs was enabled. since we want the no-df
behaviour here replace by an explicit set reassemble yes no-df.
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/17 12:37:07
Modified files:
sys/net: pf.c
Log message:
move the lastr = r assignment behind the anchor rule check so we don't
ever try to aplly options from the anchor rule if it was the
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/15 07:10:38
Modified files:
sys/net: pf.c
Log message:
little dose of scrubbing after the monster changes:
correctly inherit queue stuff, tag, rtableid from the rule if we have no
state
some
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/07 06:48:40
Modified files:
sys/net: pf_ioctl.c
Log message:
turn fragment reassembly on by default. the is little to no reason to
not do fragment reassembly. discussed with dlg and ryan in
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/07 06:52:57
Modified files:
share/man/man5 : pf.conf.5
Log message:
fragment reassembly on by default
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/07 06:50:44
Modified files:
share/man/man5 : pf.conf.5
Log message:
bit more precise
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/07 07:48:38
Modified files:
share/man/man5 : pf.conf.5
Log message:
don't we all love BNF? make it lie less
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/07 07:52:29
Modified files:
share/man/man5 : pf.conf.5
Log message:
bnf-tweaks
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/07 07:40:18
Modified files:
share/man/man5 : pf.conf.5
Log message:
nits
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/07 07:26:23
Modified files:
sys/net: pf_norm.c
Log message:
after i took everything in this fiule apart and reassembled with a lot of
new stuff asserting copyright is in order
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/06 06:05:55
Modified files:
sbin/pfctl : pfctl_parser.h pfctl.c pfctl_parser.c parse.y
share/man/man5 : pf.conf.5
sys/net: pf.c pf_ruleset.c pf_ioctl.c pfvar.h pf_norm.c
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/06 06:06:39
Modified files:
lib/libpcap: grammar.y
Log message:
teach libpcap about scrub rules
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/06 06:08:26
Modified files:
usr.bin/systat : pftop.c
Log message:
scrub rules gone
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/06 06:09:06
Modified files:
usr.sbin/tcpdump: print-pflog.c
Log message:
teach tcpdump about match rules
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/06 06:10:10
Modified files:
etc: pf.conf
Log message:
reassembly works different now
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/06 06:11:52
Modified files:
sbin/pfctl : pfctl_parser.c
Log message:
print prettier, from sthen@
* Henning Brauer henn...@cvs.openbsd.org [2009-04-06 14:07]:
CVSROOT: /cvs
Module name: src
Changes by: henn...@cvs.openbsd.org 2009/04/06 06:05:55
Modified files:
sbin/pfctl : pfctl_parser.h pfctl.c pfctl_parser.c parse.y
share/man/man5 : pf.conf.5
sys/net
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/06 06:41:48
Modified files:
regress/sbin/pfctl: Makefile pf15.in pf15.loaded pf15.ok
pf15.optimized pf16.in pf16.loaded pf16.ok
pf16.optimized
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/04/06 06:43:23
Modified files:
regress/sbin/pfctl: pfopt2.in pfopt3.in pfopt4.in pfopt5.in
pfopt5.ok
Log message:
more scrub scrubbing
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/03/26 07:59:30
Modified files:
usr.sbin/bgpd : bgpd.h parse.y printconf.c rde_update.c
Log message:
argh, do not reuse the global trans_as flag to be applied to the peer
specific or we had to widen
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/02/27 05:37:45
Modified files:
sys/net: pf.c
Log message:
fix quick reuse of tcp states.
when we, for a new state, hit an existing tcp state which is in FIN_WAIT_2
on both ends do not fail but
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/02/25 12:18:04
Modified files:
usr.sbin/bgpd : pfkey.c
Log message:
add a stupid workaround for a race somewhere in the crypto code in the
kernel. a one second sleep has made it go away in all my
CVSROOT:/cvs
Module name:www
Changes by: henn...@cvs.openbsd.org 2009/02/20 00:26:16
Modified files:
openbgpd : index.html
Log message:
openbgpd 4.4.1 with fixes from -stable
CVSROOT:/cvs
Module name:www
Changes by: henn...@cvs.openbsd.org 2009/02/20 00:27:34
Modified files:
build : Makefile
Log message:
openbgpd 4.4.1
CVSROOT:/cvs
Module name:www
Changes by: henn...@cvs.openbsd.org 2009/02/20 00:28:18
Modified files:
openbgpd : ftp.html
Log message:
openbgpd 4.4.1
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/02/18 13:06:23
Modified files:
sys/net: pf_lb.c
Log message:
bring back the NAT NOP fix, but this time right.
when we want to pretend pf_get_translation didn't do anything we must
get rid of
CVSROOT:/cvs
Module name:www
Changes by: henn...@cvs.openbsd.org 2009/02/14 11:24:19
Modified files:
. : events.html
Log message:
link my slides from dcbsdcon
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/01/31 13:06:55
Modified files:
sys/net: pf_norm.c
Log message:
unbreak ! INET6 case by sprinking #ifdef INET6
noticed by Vladimir Kirillov pro...@uaoug.org.ua
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/01/29 07:11:45
Modified files:
sys/net: pf_norm.c
Log message:
move some code around in preparation for future work:
break out the code that doesn't deal with fragment reassembly and only
* Claudio Jeker clau...@cvs.openbsd.org [2009-01-28 13:35]:
CVSROOT: /cvs
Module name: src
Changes by: clau...@cvs.openbsd.org 2009/01/28 05:34:09
Modified files:
sys/net: route.h rtsock.c
Log message:
Implement basic routing socket filtering. It is possible to
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/01/26 04:51:51
Modified files:
usr.sbin/ntpd : ntp.c
Log message:
use monotime instead of wallclock for the report thing as well
found on this laptops harddisk, probably from stockholm
CVSROOT:/cvs
Module name:www
Changes by: henn...@cvs.openbsd.org 2009/01/25 06:21:31
Modified files:
openbgpd : ftp.html
openntpd : ftp.html portable.html
Log message:
sync
CVSROOT:/cvs
Module name:www
Changes by: henn...@cvs.openbsd.org 2009/01/25 06:20:56
Modified files:
build/mirrors : openbgpd-ftp.html.head openntpd-ftp.html.head
Log message:
version # bump here too
From: Sebastian Benoit benoit-li...@fb12.de
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2009/01/21 13:32:53
Modified files:
usr.sbin/bgpd : timer.c
Log message:
timer_nextduein returned crap. fix it. so obvious... how could that happen.
found out the hard way by Marc Runkel
CVSROOT:/cvs
Module name:www
Changes by: henn...@cvs.openbsd.org 2009/01/16 07:07:22
Modified files:
openbgpd : index.html
Log message:
4.4, finally
CVSROOT:/cvs
Module name:www
Changes by: henn...@cvs.openbsd.org 2009/01/16 07:07:44
Modified files:
openntpd : index.html
Log message:
4.4, finally
CVSROOT:/cvs
Module name:www
Changes by: henn...@cvs.openbsd.org 2009/01/16 07:18:16
Modified files:
build : Makefile
Log message:
bgpd/ospfd/ntpd are at 4.4 now
CVSROOT:/cvs
Module name:src
Changes by: henn...@cvs.openbsd.org 2008/12/19 11:58:12
Modified files:
usr.sbin/bgpd : bgpd.conf.5
Log message:
document the default localpref, from discussion with
Mick Hohmann mick at IM dot net
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/11/26 09:08:17
Modified files:
sys/netinet: ip_ipip.c
Log message:
call pf_pkt_addr_changed() when we do encapsulate
fixes v6-over-v4 gifs wrt pf chatter about state linking mismatches
ok jsing
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/10/22 02:16:49
Modified files:
sbin/pflogd: pflogd.8 pflogd.c
Log message:
log pcap stats upon SIGUSR1; ok canacar
From: Dave Harrison [EMAIL PROTECTED]
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/10/17 06:59:53
Modified files:
sbin/pfctl : parse.y
Log message:
in findeol(), do not skip the pushback buffer. fixes PR 5952 by sthen@ and
should make the pushback buffer really transparent.
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/10/17 07:02:55
Modified files:
usr.sbin/bgpd : parse.y
usr.sbin/hostapd: parse.y
usr.sbin/ifstated: parse.y
usr.sbin/ospf6d: parse.y
usr.sbin/ospfd : parse.y
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/10/17 08:32:47
Modified files:
usr.sbin/ntpd : parse.y
usr.sbin/dvmrpd: parse.y
Log message:
bring in findeol() fix from pfctl
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/10/17 08:33:15
Modified files:
sbin/ipsecctl : parse.y
Log message:
findeol() fix from pfctl
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/10/13 08:02:20
Modified files:
sys/netinet: udp_usrreq.c
Log message:
disable the pcb linking for udp for the moment since there is some weird
bug with IPv6 in some circumstances. we'll find it one
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/10/02 06:31:18
Modified files:
sbin/pfctl : parse.y
Log message:
implement set state-defaults X, where X is a list of state options as
permitted keep state(X). applies to all rules which do not
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/10/02 06:36:32
Modified files:
share/man/man5 : pf.conf.5
Log message:
document state-defaults option
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/09/12 03:09:43
Modified files:
share/man/man4 : pflow.4
Log message:
revert last unauthorized commit.
I reAlly doN't ThiNk thAt ranDomLy capiTaliZing chAractErs iN woRdS mAkes
tHeM loOk MoRe ImpoRtaNt
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/09/12 06:53:55
Modified files:
sys/netinet6 : icmp6.c
Log message:
just like v4 icmp, icmp6 recycles mbufs so we need to call
pf_pkt_addr_changed to clear the recorded pf state information in the hdr
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/09/12 09:22:07
Modified files:
share/man/man4 : pflow.4
Log message:
oops missed to decapitalize the first char
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/09/11 08:49:58
Modified files:
usr.sbin/bgpd : log.h session.c session.h
Log message:
remove hackery to un-demote after the session has been established for
a while, we can now just use a timer (since
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/09/10 03:10:17
Modified files:
sys/net: pf.c
Log message:
re-enable the state key linking. i believe the bugs that hit us shortly
before release are fixed, and the extra check i added prevents
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/09/10 09:07:47
Modified files:
share/man/man5 : pf.conf.5
Log message:
pflow related stuff, reminded by jmc
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/09/09 08:00:51
Modified files:
sbin/ifconfig : ifconfig.8
Log message:
document pflow stuff, Joerg Goltermann [EMAIL PROTECTED] with some changes by
me
(I am sure jmc will make this even betterer)
CVSROOT:/cvs
Module name:src
Changes by: [EMAIL PROTECTED] 2008/09/09 08:04:09
Modified files:
sys/conf : GENERIC
Log message:
actually enable pflow
501 - 600 of 606 matches
Mail list logo
