Age | Commit message (Expand) | Author |
2003-11-14 | allow the debuglevel to be set from pf.conf (set debug) | Henning Brauer |
2003-11-08 | Add 'no-sync' state option to prevent state transition messages for states | Ryan Thomas McBride |
2003-11-06 | and fix two err() that should be errx() while beeing here | Henning Brauer |
2003-11-06 | need calloc here | Henning Brauer |
2003-11-06 | allow the label macros to be used in tags as well. | Henning Brauer |
2003-10-21 | don't use NULL as (int)0. henning ok | Jun-ichiro itojun Hagino |
2003-09-26 | Rearchitecture of the userland/kernel IOCTL interface for transactions. | Cedric Berger |
2003-09-01 | KNF | Henning Brauer |
2003-08-28 | This change is busted. what's worse, REGRESSION TESTS WOULD HAVE CAUGHT IT! | Kjell Wooding |
2003-08-26 | catch port/user/group a <>/>< b with a >= b, from mpech@ | Daniel Hartmeier |
2003-08-25 | catch return-rst ttl values > 255, from aaron@ | Daniel Hartmeier |
2003-08-24 | Tweaks: | Cedric Berger |
2003-08-22 | pf spelling police | David Krause |
2003-08-21 | Add Michal Zalewski's p0f v2 style passive OS fingerprinting to PF. | Mike Frantzen |
2003-08-20 | braindeadness police: catch queues which specify itself as child... 'nuff said | Henning Brauer |
2003-08-20 | err out nicer on errors in queue def | Henning Brauer |
2003-08-18 | catch max-mss values > 65535, report by Gregory Steuck | Daniel Hartmeier |
2003-08-09 | This patch remove the restriction that tables cannot be used in routing or | Cedric Berger |
2003-07-29 | indent | Theo de Raadt |
2003-07-19 | Simplify struct pf_pooladdr to include struct pf_addr_wrap directly | Cedric Berger |
2003-07-18 | Simplify handling of flags (-R, -N...). Remove PFCTL_FLAG_ALL. | Cedric Berger |
2003-07-15 | Repair memory managment in table parsing code. | Cedric Berger |
2003-07-14 | tpo | Daniel Hartmeier |
2003-07-11 | Better parsing and -v support for tables: | Cedric Berger |
2003-07-10 | Fix merging of host lists. | Cedric Berger |
2003-07-04 | KNF after cedric (grmpf) | Henning Brauer |
2003-07-04 | allow for a "pass" modifier on translation rules: | Henning Brauer |
2003-07-03 | Bye bye atexit(), bye bye globals... | Cedric Berger |
2003-07-03 | This patch finally cleanup pfctl_table.c. No more global buffer, | Cedric Berger |
2003-06-19 | knf | Theo de Raadt |
2003-06-18 | change expand_label_addr() to use a switch (h->addr.type) instead of | Henning Brauer |
2003-06-18 | when expanding the $srcaddr/$dstaddr label macros and the address is actually | Henning Brauer |
2003-06-09 | Attempt to resolve byte order confusion in nat code once and for all. | Ryan Thomas McBride |
2003-05-25 | must not run check_netmask() before remove_invalid_hosts() - binat case had it | Henning Brauer |
2003-05-19 | reject invalid netmasks like 10.0.0.0/68, and fix up the netmask for | Henning Brauer |
2003-05-19 | all host() receivers have to test for NULL | Henning Brauer |
2003-05-19 | if host() returns NULL, it is an error, so err the fuck out and don't | Henning Brauer |
2003-05-17 | support inverse matching on tags like | Henning Brauer |
2003-05-16 | TCP SYN proxy. Instead of 'keep state' or 'modulate state', one can use | Daniel Hartmeier |
2003-05-15 | properly complain about too long tags | Henning Brauer |
2003-05-14 | add scrub modifier "reassemble tcp" to turn on stateful TCP normalizations | Mike Frantzen |
2003-05-14 | tagging on binat | Henning Brauer |
2003-05-14 | enabled tagging on rdr rules | Henning Brauer |
2003-05-14 | with tag/tagged given, only whine about missing keep state on pass rules | Henning Brauer |
2003-05-14 | allow SCRUB rules to specify protocol again. broken sometime in the past. | Mike Frantzen |
2003-05-14 | tags on nat rules: | Henning Brauer |
2003-05-13 | make sure tagging is only ever used with stateful filter rules | Henning Brauer |
2003-05-13 | userland part for tagging. | Henning Brauer |
2003-05-11 | Don't ntohs() the translation port for nat as it is already in host byte order. | Ryan Thomas McBride |
2003-05-10 | support loading of anchors from within the main ruleset via | Henning Brauer |