| Age | Commit message (Expand) | Author |
|---|
| 2002-02-27 | Instead of printing useless @0 rule numbers from pfctl -vR, increase a | Daniel Hartmeier |
| 2002-01-11 | use bsearch() for keywords lookup, swap couple of entries to make the keyword... | Michael Shalayeff |
| 2002-01-10 | Let port 0 be specified as it's not special here. | Hugh Graham |
| 2002-01-09 | Port must be >0 and <=65535. Idea while have fun with ssh. | Mike Pechkin |
| 2002-01-09 | free() 'interface' in {nat,binat,rdr}rule | Mike Pechkin |
| 2002-01-09 | Add labels to rules. These are arbitrary names (not to be confused with | Daniel Hartmeier |
| 2002-01-08 | Add "no nat/rdr/binat" to nat.conf. The first matching rule applies. | Daniel Hartmeier |
| 2002-01-07 | remove 3rd argument from ipmask(), not used. | Mike Pechkin |
| 2001-12-23 | find correct line number in lval, instead of val | Theo de Raadt |
| 2001-12-10 | Add stateful filtering for other (non-TCP/UDP/ICMP) protocol, based on | Daniel Hartmeier |
| 2001-12-05 | Correctly parse hex numbers. Spotted by Claudio Jeker. Closes PR 2234. | Daniel Hartmeier |
| 2001-12-03 | For nat, binat and rdr rules, don't allow different address families in | Daniel Hartmeier |
| 2001-11-26 | add fastroute options similar to what is found in ipf | jasoni |
| 2001-11-05 | noone responds. | Theo de Raadt |
| 2001-10-24 | Check interface names using ifa0_lookup() and print error message for | Daniel Hartmeier |
| 2001-10-15 | Add 'allow-opts' to rules. Packets with IP options will be blocked by | Daniel Hartmeier |
| 2001-10-11 | Don't htonl() past buffer bounds if ipmask == 128 | Mike Frantzen |
| 2001-10-07 | Add interface name to address translation to pfctl, document it and add | Daniel Hartmeier |
| 2001-10-01 | print variable asignments only if -v is given. ok dhartmei/deraadt | Markus Friedl |
| 2001-09-28 | Support underscores in macro names and document it in the man page. | Daniel Hartmeier |
| 2001-09-20 | Fix uninitialized structure fields. Problem reported by Cedric Berger. | Daniel Hartmeier |
| 2001-09-15 | Implement return-icmp(number), return-icmp6(number) | Peter Stromberg |
| 2001-09-15 | Fix 'binat ... to any ...' (binat.af wasn't set). | Daniel Hartmeier |
| 2001-09-15 | Parse bug, found by wilfried@ | Daniel Hartmeier |
| 2001-09-15 | IPv6 support from Ryan McBride (mcbride@countersiege.com) | Mike Frantzen |
| 2001-09-12 | check calloc() return value | Markus Friedl |
| 2001-09-06 | - you can only binat between hosts | jasoni |
| 2001-09-06 | 1:1 bidrectional NAT (binat); ok dhartmei@ and frantzen@ | jasoni |
| 2001-09-04 | Support parameter lists {} for interfaces in filter rules, like | Daniel Hartmeier |
| 2001-08-28 | move '!' from host_list to host: "xhost : '!' host | host;"; ok dhartmei@ | Markus Friedl |
| 2001-08-28 | check for malloc/strdup == NULL | Markus Friedl |
| 2001-08-28 | Support ! operator in host parameter lists. Fixes PR system/2030. Reported | Daniel Hartmeier |
| 2001-08-26 | sort keywords | Theo de Raadt |
| 2001-08-25 | PF ISN randomization. Or in trekkie techno-babble, ISN phase modulation. | Mike Frantzen |
| 2001-08-23 | o for a port_item, initialize the "next" pointer to NULL | Todd C. Miller |
| 2001-08-23 | Support var="string". Expansion (at lex time) done using $var, for instance: | Theo de Raadt |
| 2001-08-19 | Add parameter list support to parser. Handles lists for protocol, hosts | Daniel Hartmeier |
| 2001-08-16 | track the line number per-token, so that we can report errors correctly | Theo de Raadt |
| 2001-08-14 | optimize the flags parsing; markus@ ok | Michael Shalayeff |
| 2001-08-11 | \+\n support, and spit out cc-style error messages. the parser's line | Theo de Raadt |
| 2001-07-31 | allow to test that flags are unset, ok dhartmei@, mickey@ | Peter Stromberg |
| 2001-07-19 | Fix/complete the handling of the binary ops >< and <> to behave | Kenneth R Westerback |
| 2001-07-18 | new ERROR token, errx() -> warnx() + ERROR; ok deraadt@ | Markus Friedl |
| 2001-07-18 | KNF for return | Markus Friedl |
| 2001-07-18 | check number range to fit in 32 bits | Michael Shalayeff |
| 2001-07-18 | put range checks on NUMBER, pointed out by deraadt | Michael Shalayeff |
| 2001-07-17 | spaces, parens, err instead of errx+strerror | Michael Shalayeff |
| 2001-07-17 | warnx()/YYERROR instead of errx(); suggested by mickey@ | Markus Friedl |
| 2001-07-17 | markus doesnt like min-ttl =, begone | Niels Provos |
| 2001-07-17 | support min-ttl, okay dhartmei@ | Niels Provos |
