Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-01-13 | pfr.rule.*.addr.type must be initialized to PF_ADDR_NONE for things that | Claudio Jeker | |
are not used. bzero() of the rule structure is not enough. Found with dlg@, OK mcbride@ | |||
2010-01-12 | First pass at removing the 'pf_pool' mechanism for translation and routing | Ryan Thomas McBride | |
actions. Allow interfaces to be specified in special table entries for the routing actions. Lists of addresses can now only be done using tables, which pfctl will generate automatically from the existing syntax. Functionally, this deprecates the use of multiple tables or dynamic interfaces in a single nat or rdr rule. ok henning dlg claudio | |||
2009-11-22 | Move from the PF_RULESET_FILTER world order to PF_TRANS_RULESET | Theo de Raadt | |
due to the standard henning+oga commit-and-run-for-beer problem. ok claudio | |||
2009-11-01 | remove unused variable | Charles Longeau | |
ok sthen@ | |||
2009-09-01 | Adjust example pf rules to take nat-to/rdr-to into account. | Stuart Henderson | |
2009-09-01 | adapt to new pf, ok henning@ | Stuart Henderson | |
2009-07-30 | Remove unused add_nat() function, ok jcs@ | Stuart Henderson | |
2008-04-13 | Use arc4random_buf() when requesting more than a single word of output | Damien Miller | |
Use arc4random_uniform() when the desired random number upper bound is not a power of two ok deraadt@ millert@ | |||
2008-03-24 | msg_controllen has to be CMSG_SPACE so that the kernel can account for | Theo de Raadt | |
each cmsg_len (ie. msg_controllen = sum of CMSG_ALIGN(cmsg_len). This works now that kernel fd passing has been fixed to accept a bit of sloppiness because of this ABI repair. lots of discussion with kettenis | |||
2008-03-15 | Repair more msg_controllen dealing with structures or arrays of | Theo de Raadt | |
descriptors; ok hshoexer, also looked at by kettenis and henning | |||
2008-03-13 | Correct CMSG_SPACE and CMSG_LEN usage everywhere in the tree. Due to | Theo de Raadt | |
an extensive discussion with otto, kettenis, millert, and hshoexer | |||
2007-06-23 | default rule.flags and rule.flagset to 0 instead of null | joshua stein | |
from max laier | |||
2007-05-31 | convert to new .Dd format; | Jason McIntyre | |
2006-12-20 | add an additional rule to the filter anchor that allows traffic out from | Joel Knight | |
the server to the client. this is necessary in case the server is not otherwise allowed to talk to the client. ok jcs@ | |||
2005-12-28 | import tftp-proxy 1.6, a tftp helper for pf | joshua stein | |
ok jolan@, msf@, millert@ man page help from jmc@ |