Age | Commit message (Expand) | Author |
2009-04-06 | more scrub scrubbing | Henning Brauer |
2009-04-06 | scrub gone | Henning Brauer |
2009-01-30 | If the "peer" address is not specified or derived from "to" for | Alexander Bluhm |
2009-01-29 | Remove ikefail10 ipsecctl regression test as it always fails. It | Alexander Bluhm |
2009-01-28 | Allow to specify ike and flow explicitly without peer. The any | Alexander Bluhm |
2009-01-20 | Regression tests for source flow NAT support. | Marco Pfatschbacher |
2009-01-19 | Do not use "egress" keyword as it expands to an actual interface, | Hans-Joerg Hoexer |
2008-12-22 | add regression test for aes-{128,192,256} being used with main and quick | Hans-Joerg Hoexer |
2008-12-22 | Adopt to recent change: /32 now is treated as a network address. | Hans-Joerg Hoexer |
2008-10-19 | The optional table counters added a field to the verbose | Marco Pfatschbacher |
2008-10-19 | vmstat(8) now reports "InUse" instead of "Releases". | Marco Pfatschbacher |
2008-07-01 | Isakmpd acquire mode did not work with a config generated from | Alexander Bluhm |
2008-07-01 | If multiple to addresses but no peer are given in an ike or flow | Alexander Bluhm |
2008-06-16 | fix regress after scrub TOS and tagging additions; "commit it" henning@ | David Krause |
2008-05-09 | convert port byte order in the production; add port keyword; ok deraadt@ | Markus Friedl |
2008-05-09 | divert packets to local socket without modifying the ip header; | Markus Friedl |
2008-05-08 | Add/Fix regression tests for sequences of numbers and stacked | Marco Pfatschbacher |
2008-05-07 | scrub packets based on tags; ok henning | Markus Friedl |
2008-05-07 | allow setting TOS with scrub; ok mcbride, claudio | Markus Friedl |
2008-04-21 | Test for blank lines and comments between and inline anchor and its rules. | Ryan Thomas McBride |
2008-02-01 | Add regress test for anchors matching on filter_opts. | Ryan Thomas McBride |
2008-01-04 | Add a regression test for handling addresses with trailing '/32' and address | Hans-Joerg Hoexer |
2007-11-25 | more existant -> existent, from Martynas Venckus; | Jason McIntyre |
2007-10-15 | Add new "reached end of file while parsing quoted string" as expected | Hans-Joerg Hoexer |
2007-10-14 | regression test for include directive (if anyone has a better way to do | Theo de Raadt |
2007-10-13 | we decided numbers used as strings is wrong | Theo de Raadt |
2007-09-23 | Allow numbers to be used as unquoted strings again. | Marco Pfatschbacher |
2007-09-19 | Fix and re-enable tests for interface->address translation. | Marco Pfatschbacher |
2007-09-19 | Add a few "flags any" and "no state" to have the rulesets | Marco Pfatschbacher |
2007-09-19 | pfctl seems to report errors when accessing empty tables, | Marco Pfatschbacher |
2007-09-19 | "flags S/SA keep state" is the default now | Marco Pfatschbacher |
2007-09-19 | Adopt 14 altq tests to the change of the queue output format. | Marco Pfatschbacher |
2007-09-19 | This got broken when a second pool (pfrkentry2) was added | Marco Pfatschbacher |
2007-09-19 | Remove "localhost" from the table test, since the result is dependent | Marco Pfatschbacher |
2007-08-30 | regress test address ranges | Daniel Hartmeier |
2007-07-03 | both 'proto 50' and 'proto esp' must work in flow specifications | Markus Friedl |
2007-06-20 | Allow "log" for nat rules without "pass". | Marco Pfatschbacher |
2007-05-19 | detect if newfs fails and add an extra test (amd64 floppy) | Otto Moerbeek |
2007-05-10 | Do not crash when lists include the "any" keyword. Reported by | Hans-Joerg Hoexer |
2007-05-02 | now that optimization is on by default, fix the regress tests by | David Krause |
2007-04-18 | some newfs checks, not hooked in, because it needs certain disktab | Otto Moerbeek |
2007-03-16 | move autodetection of the ID type to the parser. this way the | Markus Friedl |
2007-03-14 | We switched to aes cbc quite some time ago, so also use the correct | Hans-Joerg Hoexer |
2007-02-19 | add a test for null encryption | Hans-Joerg Hoexer |
2007-02-19 | we have to use '-k' now to show keys. | Hans-Joerg Hoexer |
2007-02-19 | previous commit to parse.y was undone. adopt these two regression tests. | Hans-Joerg Hoexer |
2007-02-16 | Adopt to recent change in parse.y (do not accept '\n' in quoted | Hans-Joerg Hoexer |
2007-01-10 | allow rule if there is at least _one_ matching address family combination. | Markus Friedl |
2007-01-04 | don't pass -1 as a netmask; report vicviq at gmail.com | Markus Friedl |
2006-11-30 | wrong rid for protocol | Markus Friedl |