![[BACK]](/icons/back.gif){kind=icon}
Return to 41.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www|
Return to 41.html CVS log | Up to [local] / www |
| version 1.86, 2007/03/17 07:35:59 | version 1.87, 2007/03/18 10:12:50 | ||
|---|---|---|---|
|
|
||
| <li> | <li> | ||
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> | <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> | ||
| can now expire table entries. | can now expire table entries. | ||
| <li><i>keep state</i> is now the default for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a> rules, as is the <i>flags S/SA</i> option on TCP connections. <i>no state</i> and <i>flags any</i> can be used to disable stateful filtering or TCP flags checking. | |||
| <li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a> ruleset optimiser can be enabled in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a>. | |||
| <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> anchors can now be loaded inline in the main <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf.conf&sektion=5">pf.conf(5)</a> and can be printed recursively. | |||
| <li>Allow | <li>Allow | ||
| <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> | <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> | ||
| rules inside anchors to have their counters reset, and make counter read | rules inside anchors to have their counters reset, and make counter read |