Age | Commit message (Collapse) | Author | |
---|---|---|---|
2006-10-17 | 'flags S/SA' not implicit if the rule is stateless. | Ryan Thomas McBride | |
2006-10-06 | Handle default 'flags S/SA keep state', 'no state' and 'flags any'. | Ryan Thomas McBride | |
2003-07-29 | Big Sync | Cedric Berger | |
2002-12-05 | no more rule numbers in output | Henning Brauer | |
2002-10-22 | Update for new semantics of set_ipmask (netmask is applied immediately | Camiel Dobbelaar | |
to an address by pfctl). | |||
2002-04-24 | Add dynamic (in-kernel) interface name -> address translation. Instead of | Daniel Hartmeier | |
using just the interface name instead of an address and reloading the rule set whenever the interface changes its address, the interface name can be put in parentheses, and the kernel will keep track of changes and update rules. There is no additional cost for evaluating rules (per packet), the cost occurs when an interface changes address (and the rules are traversed and updated where necessary). | |||
2002-02-27 | And adjust regress tests to match the rule number output. | Daniel Hartmeier | |
2001-10-07 | Add interface name to address translation to pfctl, document it and add | Daniel Hartmeier | |
a regress test. Translation is done on rule set load-time only, so the rule sets must be reloaded when an interface address changes. parse.y patch from Cedric Berger. Similar patch from Jonathon Fletcher. Thanks to both. |