| Age | Commit message (Expand) | Author |
|---|
| 2018-09-16 | Use uid_from_user(3) and gid_from_group(3) in utilities that | Todd C. Miller |
| 2018-09-06 | Remove unused af argument from unmask() | kn |
| 2018-07-16 | reduce duplicate code, fix typo/free correct buffer | kn |
| 2018-07-13 | Fix regression on child queue definitions | kn |
| 2018-07-11 | Prevent invalid interface specifiers on queue rules | kn |
| 2018-07-11 | Do for most running out of memory err() what was done for most running | Kenneth R Westerback |
| 2018-07-10 | 'set delay' for the generic packet delay mechanism, ok benno sashan | Henning Brauer |
| 2018-07-10 | fix anchor rules with filter opts, introduce filteropts_to_rule() | kn |
| 2018-07-09 | Zap dead code | kn |
| 2018-07-09 | No need to mention which memory allocation entry point failed (malloc, | Kenneth R Westerback |
| 2018-07-08 | Be consistent in warn() and log_warn() usage when | Kenneth R Westerback |
| 2018-05-18 | A pf rule with a "on rdomain n" with nonexisting rdomain n will cause an | Sebastian Benoit |
| 2018-05-09 | Fix (include file ) line number counting by keeping track of the unget | Otto Moerbeek |
| 2018-04-26 | Plug leak in error case of the common 'varset' implementations. | Kenneth R Westerback |
| 2018-02-08 | make the watermarks/thresholds for entering and leaving syncookie mode when | Henning Brauer |
| 2018-02-06 | allow control over syncookies: set syncookies never/always/adaptive | Henning Brauer |
| 2017-11-28 | The divert structure was using the port number to indicate that | Alexander Bluhm |
| 2017-11-27 | The divert structure was using the port number to indicate that | Alexander Bluhm |
| 2017-11-25 | - pfctl fails to handle nested 'load anchor' properly | Alexandr Nedvedicky |
| 2017-11-14 | - nested anchors vs. pfctl/parse.y | Alexandr Nedvedicky |
| 2017-11-13 | add a generic packet rate matching filter. allows things like | Henning Brauer |
| 2017-08-11 | add option -N (no domain resolution) | Sebastian Benoit |
| 2017-07-19 | Allow HFSC classes to use flow queues | Mike Belopuhov |
| 2017-07-19 | Rework HFSC vs FQ-CoDel checks | Mike Belopuhov |
| 2017-05-28 | Don't check np->port for NULL - it's an array, it's never NULL. | Michal Mazurek |
| 2017-05-15 | Hook up FQ-CoDel to the tree and enable configuration in the pfctl(8) | Mike Belopuhov |
| 2017-04-28 | Remove double assignments | Mike Belopuhov |
| 2017-01-05 | Replace symset()'s hand-rolled for(;;) traversal of 'symhead' TAILQ | Kenneth R Westerback |
| 2016-11-23 | Explicitly forbid to combine af-to with route-to in pfctl. The | Alexander Bluhm |
| 2016-08-26 | Add <time.h> for time(); sort <*.h> includes | Philip Guenther |
| 2016-07-18 | g/c unused (global!) var: oqueues isn't used any more. ALTQ leftover; not | Henning Brauer |
| 2016-06-22 | Add curly braces that were missed in rev 1.651. Add parenthesis to make the | Mark Kettenis |
| 2016-06-21 | do not allow whitespace in macro names, i.e. "this is" = "a variable". | Sebastian Benoit |
| 2016-06-21 | the manpage documents that af-to does not work on pass out rules, but | Sebastian Benoit |
| 2016-06-16 | allow include in inline anchors | Henning Brauer |
| 2015-09-01 | - route-to, dup-to, reply-to should not override the block action | Alexandr Nedvedicky |
| 2015-04-21 | Improve divert-to specification parsing w.r.t. rule address family. | Mike Belopuhov |
| 2015-02-26 | %% not % in error message; ok millert@ henning@ | Stuart Henderson |
| 2015-02-14 | Rather than using 0xff as a placeholder for "don't check prio", use 0xff to | Stuart Henderson |
| 2015-02-10 | since we inherit prio (as in, the queuing priority) from outside sources, | Henning Brauer |
| 2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt |
| 2014-12-19 | Support source-hash and random with tables and dynifs; not just pools. | Reyk Floeter |
| 2014-11-20 | Don't allow embedded nul characters in strings. | Jonathan Gray |
| 2014-10-27 | Fixup incorrect expansion of the networking mask for dynamic interface | Mike Belopuhov |
| 2014-10-25 | Remove unnecessary netinet/in_systm.h include. | Lawrence Teo |
| 2014-09-13 | Replace all queue *_END macro calls except CIRCLEQ_END with NULL. | Doug Hogan |
| 2014-08-23 | when you specify queues in a rule, make sure they have been defined. | Martin Pelikan |
| 2014-08-21 | deny "once" flags for match rules; ok henning | Mike Belopuhov |
| 2014-07-02 | condition above makes this part of the check useless; | Mike Belopuhov |
| 2014-06-30 | Merge two loops in collapse_redirspec into one | Mike Belopuhov |
