| Age | Commit message (Expand) | Author |
|---|
| 2015-01-21 | Include <netinet/in.h> before <net/pfvar.h>. In a future change when | Theo de Raadt |
| 2012-08-17 | Don't forget to byteswap the state_flags since it's a uint16_t now. | Mike Belopuhov |
| 2012-07-08 | New attempt to make the -P flag work with -ss, so that states can be | Lawrence Teo |
| 2012-06-01 | revert previous, breaks tcpdump | Jonathan Gray |
| 2012-06-01 | Make the -P flag work with -ss, so that states can be printed with port | Lawrence Teo |
| 2011-10-13 | pfctl change for af-to / NAT64 support. | Claudio Jeker |
| 2010-11-12 | The ioctl to show states returns a pfsync_state which is in network byte | Claudio Jeker |
| 2010-09-02 | remove trailing spaces and tabs; no binary change. | Igor Sobrado |
| 2010-01-13 | In some cases the netmask gets set to a full 128 bit mask even if no | Ryan Thomas McBride |
| 2009-11-03 | rtables are stacked on rdomains (it is possible to have multiple routing | Claudio Jeker |
| 2009-03-19 | pfctl -ss printed state levels for ICMPv6. Disable this the same | Alexander Bluhm |
| 2008-09-09 | welcome pflow(4), a netflow v5 compatible flow export interface. | Henning Brauer |
| 2008-08-12 | use correct byte order when printing state expiration minutes; ok henning@ | David Krause |
| 2008-06-29 | Simplify state creation code; merge state import/export code between pfsync | Ryan Thomas McBride |
| 2008-06-10 | save somespace in the state by collapsing two 8 bit ints used as booleans | Henning Brauer |
| 2008-06-10 | in verbose mode indicate which states are sloppy, ryan reyk theo | Henning Brauer |
| 2008-05-29 | Second half of PF state table rearrangement. | Ryan Thomas McBride |
| 2008-05-09 | Add support to kill states by rule label or state id. | Marco Pfatschbacher |
| 2007-08-30 | add support for address ranges ("from 10.1.2.50 - 10.1.3.75") in from/to | Daniel Hartmeier |
| 2007-05-31 | Cope with new ioctl interface (use pfsync_state instead of pf_state) | Ryan Thomas McBride |
| 2007-03-01 | be more careful with mixing &/| with &&/||, ok otto | Theo de Raadt |
| 2006-03-14 | implement a Unicast Reverse Path Forwarding (uRPF) check for pf(4) | Damien Miller |
| 2005-11-04 | crank pf_state and pf_src_node byte and packet counters to u_in64_t, since | Ryan Thomas McBride |
| 2005-05-24 | Identify states that will not be synchronised in pfctl -vvss output. | Christopher Pascoe |
| 2004-12-10 | allow pf to filter on route labels | Henning Brauer |
| 2004-02-10 | fix at leats the worst of Cedric "KNF is for everybody but me" Berger's fuckup | Henning Brauer |
| 2004-01-26 | we must not omit printing the netmask when it is all zero, this is dangerous - | Henning Brauer |
| 2003-12-31 | Many improvements to the handling of interfaces in PF. | Cedric Berger |
| 2003-12-27 | Remove extra \n from pf_print_state(). | Ryan Thomas McBride |
| 2003-12-15 | Add initial support for pf state synchronization over the network. | Ryan Thomas McBride |
| 2003-12-15 | Add support to track stateful connections by source ip. This allows us | Ryan Thomas McBride |
| 2003-07-06 | knf (cedric did not do it right) | Theo de Raadt |
| 2003-07-04 | KNF | Henning Brauer |
| 2003-06-21 | count packets and bidirectionally on state entries, allowing for fine-grained | Damien Miller |
| 2003-06-20 | some cleanings recommended by lint; dhartmei ok | Theo de Raadt |
| 2003-06-07 | in print_host(), don't set the mask blindly to /128 but adhere to the | Henning Brauer |
| 2003-05-19 | print out the full netmask; don't just ignore the upper bits in the v4 case | Henning Brauer |
| 2003-05-17 | Fix proxy related output. | Daniel Hartmeier |
| 2003-05-16 | TCP SYN proxy. Instead of 'keep state' or 'modulate state', one can use | Daniel Hartmeier |
| 2003-04-09 | on "pfctl -vvss", print the anchor rule number when there is one. | Cedric Berger |
| 2003-04-03 | Simplify pfctl printing code. | Cedric Berger |
| 2003-03-24 | Add missing return. Fix following buglet: | Cedric Berger |
| 2003-03-08 | Remove unneeded #includes, from Andrey Matveev andrushock(at)pisem(dot)net | Daniel Hartmeier |
| 2003-01-21 | Support for TCP window scaling (RFC 1323). ok frantzen@ | Daniel Hartmeier |
| 2003-01-20 | Remove unused argument from print_name() and fix two other nits | Camiel Dobbelaar |
| 2003-01-20 | Improve pfctl -vvs{r,n} output with rule containing tables. | Cedric Berger |
| 2003-01-07 | Remove table name hashing (pass the name in each ioctl instead), and | Daniel Hartmeier |
| 2003-01-05 | Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for table | Daniel Hartmeier |
| 2003-01-04 | I do not know where this policy of "one .h file for every .c file" comes | Theo de Raadt |
| 2003-01-03 | Bring in userland code for accessing PF radix tables. | Cedric Berger |
