Age | Commit message (Expand) | Author |
2003-09-01 | KNF | Henning Brauer |
2003-08-28 | This change is busted. what's worse, REGRESSION TESTS WOULD HAVE CAUGHT IT! | Kjell Wooding |
2003-08-26 | catch port/user/group a <>/>< b with a >= b, from mpech@ | Daniel Hartmeier |
2003-08-25 | catch return-rst ttl values > 255, from aaron@ | Daniel Hartmeier |
2003-08-24 | Tweaks: | Cedric Berger |
2003-08-22 | pf spelling police | David Krause |
2003-08-21 | Add Michal Zalewski's p0f v2 style passive OS fingerprinting to PF. | Mike Frantzen |
2003-08-20 | braindeadness police: catch queues which specify itself as child... 'nuff said | Henning Brauer |
2003-08-20 | err out nicer on errors in queue def | Henning Brauer |
2003-08-18 | catch max-mss values > 65535, report by Gregory Steuck | Daniel Hartmeier |
2003-08-09 | This patch remove the restriction that tables cannot be used in routing or | Cedric Berger |
2003-07-29 | indent | Theo de Raadt |
2003-07-19 | Simplify struct pf_pooladdr to include struct pf_addr_wrap directly | Cedric Berger |
2003-07-18 | Simplify handling of flags (-R, -N...). Remove PFCTL_FLAG_ALL. | Cedric Berger |
2003-07-15 | Repair memory managment in table parsing code. | Cedric Berger |
2003-07-14 | tpo | Daniel Hartmeier |
2003-07-11 | Better parsing and -v support for tables: | Cedric Berger |
2003-07-10 | Fix merging of host lists. | Cedric Berger |
2003-07-04 | KNF after cedric (grmpf) | Henning Brauer |
2003-07-04 | allow for a "pass" modifier on translation rules: | Henning Brauer |
2003-07-03 | Bye bye atexit(), bye bye globals... | Cedric Berger |
2003-07-03 | This patch finally cleanup pfctl_table.c. No more global buffer, | Cedric Berger |
2003-06-19 | knf | Theo de Raadt |
2003-06-18 | change expand_label_addr() to use a switch (h->addr.type) instead of | Henning Brauer |
2003-06-18 | when expanding the $srcaddr/$dstaddr label macros and the address is actually | Henning Brauer |
2003-06-09 | Attempt to resolve byte order confusion in nat code once and for all. | Ryan Thomas McBride |
2003-05-25 | must not run check_netmask() before remove_invalid_hosts() - binat case had it | Henning Brauer |
2003-05-19 | reject invalid netmasks like 10.0.0.0/68, and fix up the netmask for | Henning Brauer |
2003-05-19 | all host() receivers have to test for NULL | Henning Brauer |
2003-05-19 | if host() returns NULL, it is an error, so err the fuck out and don't | Henning Brauer |
2003-05-17 | support inverse matching on tags like | Henning Brauer |
2003-05-16 | TCP SYN proxy. Instead of 'keep state' or 'modulate state', one can use | Daniel Hartmeier |
2003-05-15 | properly complain about too long tags | Henning Brauer |
2003-05-14 | add scrub modifier "reassemble tcp" to turn on stateful TCP normalizations | Mike Frantzen |
2003-05-14 | tagging on binat | Henning Brauer |
2003-05-14 | enabled tagging on rdr rules | Henning Brauer |
2003-05-14 | with tag/tagged given, only whine about missing keep state on pass rules | Henning Brauer |
2003-05-14 | allow SCRUB rules to specify protocol again. broken sometime in the past. | Mike Frantzen |
2003-05-14 | tags on nat rules: | Henning Brauer |
2003-05-13 | make sure tagging is only ever used with stateful filter rules | Henning Brauer |
2003-05-13 | userland part for tagging. | Henning Brauer |
2003-05-11 | Don't ntohs() the translation port for nat as it is already in host byte order. | Ryan Thomas McBride |
2003-05-10 | support loading of anchors from within the main ruleset via | Henning Brauer |
2003-05-03 | don't free() the char * carrying the rule label too early | Henning Brauer |
2003-05-01 | ease label handling | Henning Brauer |
2003-05-01 | allow label on antispoof; requested by Gregor Binder <gbinder at sysfive.com> | Henning Brauer |
2003-04-30 | Allow tables to be loaded into anchors. | Cedric Berger |
2003-04-25 | Properly copy the second part of nat proxy port range, when specified. | Daniel Hartmeier |
2003-04-15 | pass down the unparsed queue opts (struct node_queue_opt) to | Henning Brauer |
2003-04-14 | let print_altq and print_queue take a struct node_queue_bw parameter instead | Henning Brauer |