Age | Commit message (Expand) | Author |
2011-04-18 | Deprecate vnds in favour of svnds. | Thordur I. Bjornsson |
2010-10-15 | libdes -> libcrypto | Jonathan Gray |
2010-10-06 | Retire Skipjack | Mike Belopuhov |
2010-07-03 | add several new tests for pfctl, and fix the output of some existing | Peter Hessler |
2010-07-01 | if we cannot copy the setup file (because objdir doesn't exist), then | Peter Hessler |
2010-06-30 | Add a test for route labels, re PR6416. ok phessler@ | Stuart Henderson |
2010-06-29 | Replace the hand-crafted Diffie-Hellman implementation in isakmpd with | Reyk Floeter |
2010-06-20 | The -R option was removed from pfctl in March, so we no longer need this | Peter Hessler |
2010-05-10 | Various comment typos. 'wether' -> 'whether' (most popular), 'possiblity' -> | Kenneth R Westerback |
2010-03-23 | adjust after -A / -O / -R / -T load removal | Henning Brauer |
2010-01-13 | Update regress output files to -current behaviour | Ryan Thomas McBride |
2010-01-13 | Remove random component of auto-generated table names in loaded rules. | Ryan Thomas McBride |
2010-01-12 | no nat is no longer legal | Ryan Thomas McBride |
2010-01-12 | { if0, if1 } is ambiguous in a route spec, and this should have been | Ryan Thomas McBride |
2010-01-12 | nat-anchor, rdr-anchor, binat-anchor are no longer legal in the grammar. | Ryan Thomas McBride |
2010-01-04 | add a script that I use before ever release to check that our | Theo de Raadt |
2009-10-06 | more updates for new pf with source-hash manually added to | Jonathan Gray |
2009-09-24 | Update some more tests for new pf. | Jonathan Gray |
2009-09-24 | Remove some tests that are no longer relevant with the new pf. | Jonathan Gray |
2009-09-23 | sync with pfopt5.in correct comments regarding -N/-R | Jonathan Gray |
2009-09-23 | More tweaks to try to catchup to recent pf changes. | Jonathan Gray |
2009-09-07 | implement binat-to as a macro-like rule: a rule using the new binat-to | Reyk Floeter |
2009-09-03 | Adapt to new pfctl, remove use of -Fn and -sn | Jonathan Gray |
2009-09-03 | adapt to new pf | Jonathan Gray |
2009-09-03 | adapt to nat changes | Jonathan Gray |
2009-09-02 | convert a bunch of rdr/nat rules to the new syntax | Jonathan Gray |
2009-08-04 | Add regress tests with IPv4 and IPv6 addresses for the srcid and/or dstid. | Joel Sing |
2009-06-30 | add "-o none" to pfctl call to prevent automatic table creation of | David Krause |
2009-06-30 | update after the "reassemble tcp" fix (kernel/6178); ok sthen@ | David Krause |
2009-06-24 | fix this regression test; "reassemble tcp" should be in this location | Stuart Henderson |
2009-05-14 | handle the new require-order default of "no" in existing tests, and add | Stuart Henderson |
2009-04-26 | - check equality with '==', from skreuzer@exit2shell.com | Okan Demirmen |
2009-04-06 | more scrub scrubbing | Henning Brauer |
2009-04-06 | scrub gone | Henning Brauer |
2009-01-30 | If the "peer" address is not specified or derived from "to" for | Alexander Bluhm |
2009-01-29 | Remove ikefail10 ipsecctl regression test as it always fails. It | Alexander Bluhm |
2009-01-28 | Allow to specify ike and flow explicitly without peer. The any | Alexander Bluhm |
2009-01-20 | Regression tests for source flow NAT support. | Marco Pfatschbacher |
2009-01-19 | Do not use "egress" keyword as it expands to an actual interface, | Hans-Joerg Hoexer |
2008-12-22 | add regression test for aes-{128,192,256} being used with main and quick | Hans-Joerg Hoexer |
2008-12-22 | Adopt to recent change: /32 now is treated as a network address. | Hans-Joerg Hoexer |
2008-10-19 | The optional table counters added a field to the verbose | Marco Pfatschbacher |
2008-10-19 | vmstat(8) now reports "InUse" instead of "Releases". | Marco Pfatschbacher |
2008-07-01 | Isakmpd acquire mode did not work with a config generated from | Alexander Bluhm |
2008-07-01 | If multiple to addresses but no peer are given in an ike or flow | Alexander Bluhm |
2008-06-16 | fix regress after scrub TOS and tagging additions; "commit it" henning@ | David Krause |
2008-05-09 | convert port byte order in the production; add port keyword; ok deraadt@ | Markus Friedl |
2008-05-09 | divert packets to local socket without modifying the ip header; | Markus Friedl |
2008-05-08 | Add/Fix regression tests for sequences of numbers and stacked | Marco Pfatschbacher |
2008-05-07 | scrub packets based on tags; ok henning | Markus Friedl |