| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Standardize argument naming for "sourceaddr" and unify the wording a bit, |   schwarze | 2020-02-12 | 2 | -7/+8 |
| * | When system calls indicate an error they return -1, not some arbitrary |   deraadt | 2019-06-28 | 1 | -7/+7 |
| * | fix typo; from semarie | deraadt | 2017-01-15 | 1 | -3/+3 |
| * | Exit early from rdaemon() is the passed fd is invalid. |   jca | 2016-09-26 | 1 | -1/+8 |
| * | Go in the background later, using rdaemon(). | jca | 2016-09-15 | 1 | -8/+39 |
| * | Exit early with an error if the "_ftp_proxy" user does not exist. This prevents |   ajacoutot | 2016-02-12 | 1 | -1/+4 |
| * | no need for af on divert-to rule; from/ok mikeb |   jmc | 2016-01-04 | 1 | -3/+3 |
| * | commiting -> committing |   mmcc | 2015-12-22 | 1 | -2/+2 |
| * | Make the NOPRIV_USER match that is actually intended to be used for |   sebastia | 2015-12-04 | 1 | -2/+2 |
| * | switch to new _ftp_proxy user; ok dlg | deraadt | 2015-12-01 | 2 | -5/+5 |
| * | Include <netinet/in.h> before <net/pfvar.h>. In a future change when | deraadt | 2015-01-21 | 2 | -6/+6 |
| * | Document that ftp-proxy breaks explicit RFC4217 FTP TLS. While here, |   stsp | 2015-01-09 | 1 | -3/+7 |
| * | Replace all queue *_END macro calls except CIRCLEQ_END with NULL. |   doug | 2014-09-13 | 1 | -2/+2 |
| * | camield requested backout of rev 1.26, and indeed ftp-proxy does not |   benno | 2013-03-15 | 1 | -45/+3 |
| * | handle ECONNABORTED errors from accept(). In many code blocks they can be | deraadt | 2013-03-11 | 1 | -2/+4 |
| * | reserve a filedescriptor on accept() for subsequent connect() call, as | benno | 2013-03-10 | 1 | -3/+45 |
| * | prio 0 is valid, therefore, I chose an "impossible" value for prio meaning |   henning | 2012-09-18 | 1 | -2/+1 |
| * | rename prio in struct pf_rule and related structs to set_prio so it is | henning | 2012-07-07 | 1 | -2/+2 |
| * | log all, not log-all; ok henning | jmc | 2012-06-25 | 1 | -3/+3 |
| * | Check for nat_range_high before creating the PF nat rule. |   haesbaert | 2012-04-30 | 1 | -2/+2 |
| * | Rate-limit accepting of new connections while we are experiencing |   camield | 2012-04-05 | 1 | -6/+25 |
| * | catch up with "on rdomain" changes; ok claudio |   mikeb | 2012-03-06 | 1 | -3/+4 |
| * | In preparation for getline and getdelim additions to libc, rename getline() |   fgsch | 2012-03-04 | 1 | -5/+5 |
| * | fix whitespace |   sthen | 2011-06-22 | 1 | -5/+5 |
| * | Convert SO_RTABLE's protocol level to the SOL_SOCKET; ok claudio | mikeb | 2011-06-21 | 1 | -4/+3 |
| * | tweak previous; | jmc | 2011-05-16 | 1 | -4/+4 |
| * | Make it clear that ftp-proxy needs to make outbound connections. |   mcbride | 2011-05-12 | 1 | -3/+6 |
| * | divert-to is picky about the address family so adjust the rule | mikeb | 2011-04-28 | 1 | -2/+2 |
| * | switch ftp-proxy over to divert-to instead of rdr-to. this avoids | mikeb | 2011-04-28 | 4 | -95/+15 |
| * | Use the rdomain information returned by DIOCNATLOOK to install the |   claudio | 2011-03-25 | 3 | -30/+42 |
| * | pfr.rule.*.addr.type must be initialized to PF_ADDR_NONE for things that | claudio | 2010-01-13 | 1 | -1/+4 |
| * | First pass at removing the 'pf_pool' mechanism for translation and routing | mcbride | 2010-01-12 | 1 | -18/+10 |
| * | Move from the PF_RULESET_FILTER world order to PF_TRANS_RULESET | deraadt | 2009-11-22 | 1 | -6/+6 |
| * | If tagging is used use match rules instead of pass rules. This is needed | claudio | 2009-11-21 | 2 | -5/+11 |
| * | rdr -> rdr-to | jmc | 2009-09-07 | 1 | -4/+4 |
| * | Bring manpage up to speed with the changes that just happend or at least | claudio | 2009-09-01 | 1 | -23/+14 |
| * | Bring ftp-proxy in sync with the massive pf change just commited by Henning. | claudio | 2009-09-01 | 3 | -145/+57 |
| * | Better error messages. Include the function causing the problem and do not | claudio | 2008-06-13 | 2 | -9/+6 |
| * | Flush output buffers before closing TCP session. Fixes the case where |   joel | 2008-04-22 | 1 | -1/+7 |
| * | Use arc4random_buf() when requesting more than a single word of output |   djm | 2008-04-13 | 1 | -3/+3 |
| * | Don't pass quick when tagging, so the tag can be used outside | henning | 2008-02-26 | 3 | -15/+29 |
| * | Some servers / proxies out there like to open the data connection | camield | 2007-08-15 | 1 | -11/+34 |
| * | - -T before -t | jmc | 2007-08-01 | 1 | -6/+8 |
| * | allow ftp-proxy to add tag statements to teh rules it inserts | henning | 2007-08-01 | 4 | -12/+26 |
| * | convert to new .Dd format; | jmc | 2007-05-31 | 1 | -2/+2 |
| * | Remove stub write callback functions now that libevent allows them to be NULL. | camield | 2006-12-30 | 1 | -19/+5 |
| * | Convert three instances of atoi() to strtonum() and apply sane upper bounds. | camield | 2006-12-30 | 2 | -13/+16 |
| * | Ignore sigpipe as libevent does not handle that for us. Confirmed by | camield | 2006-12-12 | 1 | -1/+2 |
| * | forgot to update the comment as well | camield | 2006-12-01 | 1 | -2/+2 |
| * | use flags S/SA for consistency with the rest of pf | camield | 2006-12-01 | 1 | -2/+2 |
