Age | Commit message (Expand) | Author |
2005-01-05 | Modify pfctl behaviour so that 'set ...' options are no longer "sticky", ie. | Ryan Thomas McBride |
2004-12-29 | Print 'set fingerprints' correctly when parsing verbosely. | Ryan Thomas McBride |
2004-12-23 | set rule_flag PFRULE_SRCTRACK when setting srctrack, found by camield@ | Daniel Hartmeier |
2004-12-22 | Introduce 'set skip on <ifspec>' to support a list of interfaces where no | Daniel Hartmeier |
2004-12-15 | missing free()s; with pat | Henning Brauer |
2004-12-10 | allow pf to filter on route labels | Henning Brauer |
2004-12-08 | Add "'overload' requires 'max-src-conn' or 'max-src-conn-rate'" sanity check, | Ryan Thomas McBride |
2004-12-07 | re-commit mcbride@'s 'flush global', this time without the breakage in | Daniel Hartmeier |
2004-12-07 | real backout | Theo de Raadt |
2004-12-07 | oops, incomplete backout | Theo de Raadt |
2004-12-07 | tree does not compile, spotted by dlg (not obvious how to fix) | Theo de Raadt |
2004-12-07 | Change the default for 'overload <table> flush' to flush only states from the | Ryan Thomas McBride |
2004-12-05 | initialize $$->tail and $$->next for MAXSRCCONNRATE | Daniel Hartmeier |
2004-12-04 | Userland support for limiting open tcp connections per source. eg: | Ryan Thomas McBride |
2004-09-21 | Implement "no scrub" to allow exclusion of specific traffic from scrub rules. | Aaron Campbell |
2004-06-29 | remove cedric's bogus interface name verification code. | Henning Brauer |
2004-06-29 | convert a few memcpy()s to strlcpy() so we don't copy uninitialized junk into | Mike Frantzen |
2004-06-26 | add back PF_INOUT, fixes reassemble tcp | David Krause |
2004-06-25 | repair tree nanobreak by the nanobum | Theo de Raadt |
2004-06-10 | rename struct pf_rule_addr member 'not' to 'neg', as 'not' is a reserved | Daniel Hartmeier |
2004-05-21 | Use '/' instead of ':' as separator for anchor path components. Note that | Daniel Hartmeier |
2004-05-19 | Allow recursive anchors (anchors within anchors, up to 64 | Daniel Hartmeier |
2004-04-24 | Add "probability xxx" rule modifier. ok deraadt@ | Cedric Berger |
2004-04-22 | typo, From: Jared Yanovich <jjy2+@pitt.edu> | Henning Brauer |
2004-04-14 | make antispoof work with dynamic addresses. ok dhartmei@ mcbride@ | Cedric Berger |
2004-03-20 | spelling fix; ok dhartmei@ henning@ deraadt@ | David Krause |
2004-03-14 | #include fixes, from Max Laier, ok beck@ henning@ | Daniel Hartmeier |
2004-03-08 | plug 124 memory leaks | Henning Brauer |
2004-03-06 | from bgpd: | Henning Brauer |
2004-03-01 | support "tagged <name>" on anchor rules, suggested by vd@vmunix.lt, | Daniel Hartmeier |
2004-02-24 | 'max-src-nodes' requires 'source-track rule'. Set that automatically, | Ryan Thomas McBride |
2004-02-24 | fixup. | Cedric Berger |
2004-02-24 | Check for 'source-track rule' with 'max-src-nodes'. | Ryan Thomas McBride |
2004-02-11 | Fix interface clobbering for link-local addresses. Found by Pyun YongHyeon. | Cedric Berger |
2004-02-10 | KNF | Henning Brauer |
2004-02-10 | fix at leats the worst of Cedric "KNF is for everybody but me" Berger's fuckup | Henning Brauer |
2004-02-04 | Handle rules like 'pass ... proto { tcp udp icmp } ... modulate state' | Ryan Thomas McBride |
2004-02-03 | fix PR 3664 / jared r r spiegel | Henning Brauer |
2004-01-05 | few off by ones in strlcpy overflow check; Patrick Latifi | Henning Brauer |
2004-01-04 | don't ignore "!" on "binat on !foo". ok mcbride@ | Cedric Berger |
2003-12-31 | spacing. note this, cedric | Theo de Raadt |
2003-12-31 | Many improvements to the handling of interfaces in PF. | Cedric Berger |
2003-12-30 | fix TAILQ abuse. | Henning Brauer |
2003-12-19 | i wrote much of these, assert my copyright | Henning Brauer |
2003-12-19 | assert copyright. i rewrite much of this | Theo de Raadt |
2003-12-16 | Check that max-src-states and max-src-nodes are not being set to 0. | Ryan Thomas McBride |
2003-12-15 | KNF here too | Henning Brauer |
2003-12-15 | Whitespace. | Ryan Thomas McBride |
2003-12-15 | Add initial support for pf state synchronization over the network. | Ryan Thomas McBride |
2003-12-15 | Add support to track stateful connections by source ip. This allows us | Ryan Thomas McBride |