d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
158,170 Commits 6 Branches 133 Tags 2.6 GiB
e9dfd82ff1
Commit Graph

28 Commits

Author SHA1 Message Date
Xin LI
dcc2b1ff46 Adapt OpenBSD pf's "sloopy" TCP state machine which is useful for Direct 
Server Return mode, where not all packets would be visible to the load
balancer or gateway.

This commit should be reverted when we merge future pf versions.  The
benefit it would provide is that this version does not break any existing
public interface and thus won't be a problem if we want to MFC it to
earlier FreeBSD releases.

Discussed with:	mlaier
Obtained from:	OpenBSD
Sponsored by:	iXsystems, Inc.
MFC after:	1 month
 2009-12-24 00:43:44 +00:00
Remko Lodder
90b87073e6 MFOpenBSD rev 1.393 pf.conf.5 
do not describe `/' as solidus; from Allen (freebsd pr120484);

PR:		120484
Submitted by:	Allen <alandsidel at 1001islington dot com>
MFC After:	3 days
 2008-02-11 21:09:34 +00:00
Max Laier
5ee7cd2107 Commit resolved import of OpenBSD 4.1 pf userland from perforce. 
Approved by:	re (kensmith)
 2007-07-03 12:30:03 +00:00
Remko Lodder
ce7fce4055 Revert my previous change, add an MLINK from securelevel.7 to security.7 
Discussed with:	brueffer
 2007-06-01 21:33:21 +00:00
Remko Lodder
14ced2763a Change securelevel(7) to security(7). Yes i am aware 
that this is within the contrib directory.

PR:		docs/104402
Submitted by:	Dr. Markus Waldeck <waldeck at gmx dot de>

Discussed with:	mlaier
 2007-06-01 21:09:11 +00:00
Daniel Hartmeier
6cde8a4235 From OpenBSD, rev. 1.379 
Document how 'allow-opts' applies to routing headers in IPv6.

MFC after:	1 week
Discussed with:	mlaier
 2007-05-21 20:12:35 +00:00
Max Laier
d6e883fee5 Mention that we do not support route labels in the BUGS section. 
PR:		docs/93590
Reported by:	Niki Denev
 2006-10-30 15:15:37 +00:00
Gleb Smirnoff
301402accb - Note that the synchronisation interface needs to be up and have 
an IP address assigned.
- Add "quick" keyword to pf.conf example.

PR:		docs/85209
 2006-06-06 12:35:53 +00:00
Yaroslav Tykhiy
c8a0dfab83 Add an rc.d script to start pfsync at the right moment of the 
system boot, and hook it up in the system.

The separate script is needed because in the presence of various
interface lists in rc.conf ($network_interfaces, $cloned_interfaces,
$sppp_interfaces, $gif_interfaces, more to come) it is hard to start
them orderly, so that pfsync is brought up after its syncdev, which
is required for the proper startup of pfsync.

Discussed with:	mlaier on -pf
MFC after:	5 days
 2005-10-02 18:59:02 +00:00
Max Laier
7badd6a5e5 Redirect bridge(4) to if_bridge(4). These should have pointed to if_bridge 
from the begining.

Reminded by:	ru
 2005-09-28 08:11:15 +00:00
Christian Brueffer
819f8dfa2b More tcpdump 8->1 cleanup. 
Approved by:	mlaier
MFC after:	3 days
 2005-08-06 13:03:03 +00:00
Christian Brueffer
f0ea72a038 - Remove MLINKS to nonexistant manpages 
- Change some section numbers to match reality
- For MLINKS to manpages from ports, mention which port installs them

MFC after:	3 days
 2005-07-14 20:29:08 +00:00
Max Laier
0baf7c8675 Resolve conflicts created during the import of pf 3.7 Some features are 
missing and will be implemented in a second step.  This is functional as is.

Tested by:	freebsd-pf, pfsense.org
Obtained from:	OpenBSD
 2005-05-03 16:55:20 +00:00
Max Laier
b1feb7cada This commit was generated by cvs2svn to compensate for changes in r145837, 
which included commits to RCS files with non-trunk default branches.
 2005-05-03 16:47:37 +00:00
Max Laier
61a1372b41 Import pf userland from OpenBSD 3.7 (OPENBSD_3_7 as of today) 2005-05-03 16:47:37 +00:00
Gleb Smirnoff
469f8a6aca - remove OpenBSDisms, add FreeBSDisms 
- comment out feature, we do not have yet: tcpdumping on pfsync,
  add a BUGS section
- reference carp.4
- dereference bpf(4), tcpdump(7), hostname.if(5)
- sort references
- tell when pfsync appeared in FreeBSD

Reviewed by:	mlaier
MFC after:	1 week
 2005-02-23 17:37:39 +00:00
Max Laier
c721916790 Fix sloppy use of "manpage", bump .Dd where applicable and rename RED to 
Random Early Detection (not ... Drop) in order to be consistent with other
documentation on ALTQ

Pointed out by:	simon, ru, Brad Davis
 2005-02-07 23:20:12 +00:00
Max Laier
8624b327d4 Be more verbose about altq SYNOPSIS and add more linkage in the relating pf 
documents.

Inspired by:	scottl
Reviewed by:	Brad Davis <so14kNOso14kSPAMcom>
MFC after:	3 days
 2005-02-07 11:46:36 +00:00
Max Laier
2346577455 Fix a reference from pool(9) -> zone(9), but keep on talking about "memory 
pools" as that is what UMA provides.

Submitted by:	Jay <jay NO meangrape SPAM com>
 2004-11-14 17:05:54 +00:00
Max Laier
048b39f692 Rename the QUEUEING section to QUEUEING/ALTQ to make it easier to find the 
appropiate section when redirected from ALTQ(4).

MFC after:	2 days
 2004-10-07 15:39:02 +00:00
Max Laier
f2403525f7 Document a problem with user/group filtering. With debug.mpsafenet=1 this 
might result in a deadlock. The fix involves critical changes in the PF
locking strategy (which will happen after 5.3R). For now advise users to set
debug.mpsafenet=0 if they use this kind of filtering.

The same problem exists for IPFW.

mdoc help from:		simon
MFC after:		2 days
 2004-10-03 10:42:42 +00:00
Max Laier
9007cc283f PFIL_HOOKS is no longer an optional item. 
Submitted by:	Anders Hanssen
MFC after:	1 day
 2004-09-26 16:10:40 +00:00
Max Laier
9d7ccc0ffa Bring in some examples (and create space for future work here): 
- Add OpenBSD example rulesets as advertised in etc/pf.conf and pf.conf(5)
- Tweak the pointer to fit the FreeBSD default location share/examples/pf
- Account for the new directory in BSD.usr.dist (no hier(7) change required
  as share/examples is an opaque item there).

Obtained from:	OpenBSD
Reminded by:	Thomas T. Veldhouse
PR:		docs/71691
MFC after:	2 days
 2004-09-14 01:07:19 +00:00
Max Laier
22ac3ead26 Commit userland part of pf version 3.5 from OpenBSD (OPENBSD_3_5_BASE). 2004-06-16 23:39:33 +00:00
Max Laier
abff386833 Import userland of pf 3.5 from OpenBSD (OPENBSD_3_5_BASE). 2004-06-16 23:26:00 +00:00
Max Laier
24b10b46ce This commit was generated by cvs2svn to compensate for changes in r130614, 
which included commits to RCS files with non-trunk default branches.
 2004-06-16 23:26:00 +00:00
Max Laier
1abe035580 FreeBSD-if .4 manpages for pf/pflog/pfsync. 
PR:		docs/65687
Submitted by:	Sergey Matveychuk
Approved by:	bms(mentor)
 2004-04-18 13:59:12 +00:00
Max Laier
13b9f61009 Vendor import of OpenBSD's pf userland as of OpenBSD 3.4 
Approved by: bms(mentor), core(in general)
 2004-02-28 16:52:45 +00:00