Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Standardize argument naming for "sourceaddr" and unify the wording a bit, | 2020-02-12 | 1 | -5/+6 | |
| | | | | similar to what deraadt@ recently did in other manual pages. | ||||
* | fix typo; from semarie | 2017-01-15 | 1 | -3/+3 | |
| | |||||
* | no need for af on divert-to rule; from/ok mikeb | 2016-01-04 | 1 | -3/+3 | |
| | |||||
* | switch to new _ftp_proxy user; ok dlg | 2015-12-01 | 1 | -3/+3 | |
| | |||||
* | Document that ftp-proxy breaks explicit RFC4217 FTP TLS. While here, | 2015-01-09 | 1 | -3/+7 | |
| | | | | | chroot and privdrop is a feature, not a bug, so move it out of CAVEATS. ok sthen | ||||
* | log all, not log-all; ok henning | 2012-06-25 | 1 | -3/+3 | |
| | |||||
* | tweak previous; | 2011-05-16 | 1 | -4/+4 | |
| | |||||
* | Make it clear that ftp-proxy needs to make outbound connections. | 2011-05-12 | 1 | -3/+6 | |
| | | | | ok claudio | ||||
* | divert-to is picky about the address family so adjust the rule | 2011-04-28 | 1 | -2/+2 | |
| | |||||
* | switch ftp-proxy over to divert-to instead of rdr-to. this avoids | 2011-04-28 | 1 | -4/+4 | |
| | | | | | an expensive state lookup (via natlook ioctl) and shrinks the code. tested by me and sthen, ok reyk sthen | ||||
* | If tagging is used use match rules instead of pass rules. This is needed | 2009-11-21 | 1 | -3/+6 | |
| | | | | | | so that later pass rules will not overwrite the nat-to/rdr-to settings. Because of this there must be an expilicit "pass .. tagged proxytag .." rule after the ftp-proxy anchor. OK henning@ | ||||
* | rdr -> rdr-to | 2009-09-07 | 1 | -4/+4 | |
| | | | | from Karl-Heinz Wild | ||||
* | Bring manpage up to speed with the changes that just happend or at least | 2009-09-01 | 1 | -23/+14 | |
| | | | | try to. | ||||
* | Don't pass quick when tagging, so the tag can be used outside | 2008-02-26 | 1 | -8/+18 | |
| | | | | | | the ftp-proxy anchor. Exotic setups with route-to etc. can be implemented this way. from camield, ok reyk beck canacar and manpage polished by jmc | ||||
* | - -T before -t | 2007-08-01 | 1 | -6/+8 | |
| | | | | - use .Bk/.Ek | ||||
* | allow ftp-proxy to add tag statements to teh rules it inserts | 2007-08-01 | 1 | -2/+7 | |
| | | | | clever, nice and easy diff from bsd@openbsd.rutgers.edu, ok pyr reyk | ||||
* | convert to new .Dd format; | 2007-05-31 | 1 | -2/+2 | |
| | |||||
* | Convert three instances of atoi() to strtonum() and apply sane upper bounds. | 2006-12-30 | 1 | -3/+4 | |
| | | | | | | Triggered by Rik/harry Bobbaers on bugs@. ok mbalmer@ ray@ | ||||
* | no need to use "keep state" and "flags S/SA" in pf rules, | 2006-10-23 | 1 | -5/+5 | |
| | | | | | | now that it is the default; ok henning mcbride camield (ftp-proxy bits) deraadt | ||||
* | document that ftp-proxy cannot function at a raised securelevel | 2006-08-30 | 1 | -1/+9 | |
| | | | | ok jmc marco | ||||
* | .Sh SECURITY -> .Sh CAVEATS | 2005-11-20 | 1 | -6/+6 | |
| | | | | ok camield@ | ||||
* | Introduce verbose option to control the logging of the pf rules. | 2005-06-07 | 1 | -5/+10 | |
| | | | | ok beck mpf | ||||
* | tweaks; | 2005-05-31 | 1 | -5/+7 | |
| | |||||
* | Import new FTP proxy. Handles IPv6 and all FTP modes. It was | 2005-05-26 | 1 | -0/+167 | |
previously known as pftpx. Not connected to the builds yet. ok beck |