CVSROOT: /cvs Module name: src Changes by: r...@cvs.openbsd.org 2014/07/09 10:42:05
Modified files: usr.sbin/relayd: config.c name2id.c parse.y pfe.c relay.c relay_http.c relay_udp.c relayd.c relayd.conf.5 relayd.h usr.sbin/relayctl: relayctl.c Added files: usr.sbin/relayd: http.h Log message: Replace the protocol directives for HTTP with a new generic filtering language. The grammar is inspired by pf and allows to write versatile last-matching filter rules in protocol sections starting with the "pass", "block" or "match" keywords. This work was started almost two years ago and replaces large parts of relayd(8)'s HTTP and filtering code. The initial version reimplements and extends HTTP filtering, but will be improved to support generic TCP and other protocols later. With some testing, feedback, and help from benno@ and andre@. OK benno@