Age | Commit message (Expand) | Author |
2005-06-13 | make the packet and byte counters on rules and src nodes per direction, | Henning Brauer |
2005-06-13 | free memory in show_src_nodes and show_states, as reported by | Jared Yanovich |
2005-05-28 | don't print the "[ Inserted: uid pid ]" line when -g is used, so the | Daniel Hartmeier |
2005-05-27 | log two pairs of uid/pid through pflog: the uid/pid of the process that | Daniel Hartmeier |
2005-05-23 | change pool allocation of table entries, no longer use the oldnointr | Daniel Hartmeier |
2005-05-22 | Add support to kill states that match networks. | Marco Pfatschbacher |
2005-05-21 | clean up and rework the interface absraction code big time, rip out multiple | Henning Brauer |
2005-05-05 | typo | Joel Knight |
2005-03-07 | fd leaks in error paths, From: Andrey Matveev <andrushock@korovino.net> | Henning Brauer |
2005-03-06 | print "set skip on" with -v in such a way that the output is valid input | Daniel Hartmeier |
2005-01-06 | Missing braces in pfctl_load_debug(), pointed out by camield@ | Ryan Thomas McBride |
2005-01-05 | Modify pfctl behaviour so that 'set ...' options are no longer "sticky", ie. | Ryan Thomas McBride |
2004-12-29 | change last commit so that the test for PF_OPT_NOACTION is actually in | Dan Harnett |
2004-12-29 | don't clear interface flags if '-n' option was given. | Dan Harnett |
2004-12-29 | be quiet about resetting the interface flags omn ruleset load, only | Henning Brauer |
2004-12-28 | reset skip interface flags on reloads and for -Fall | Henning Brauer |
2004-12-27 | unbreak tree | Theo de Raadt |
2004-12-27 | reset skip interface flags on reloads and for -Fall | Henning Brauer |
2004-12-22 | Introduce 'set skip on <ifspec>' to support a list of interfaces where no | Daniel Hartmeier |
2004-09-21 | Implement "no scrub" to allow exclusion of specific traffic from scrub rules. | Aaron Campbell |
2004-08-26 | sync usage for -a | Jared Yanovich |
2004-08-08 | spacing | Theo de Raadt |
2004-07-23 | - make SYNOPSIS and usage() clear that -t precedes -T; | Jason McIntyre |
2004-07-19 | print the correct labels when displaying timeouts with pfctl (eg, pfctl -st). | David Gwynne |
2004-07-16 | 'pfctl -o' ruleset optimizer that doesnt change the meaning of the final ruleset | Mike Frantzen |
2004-05-21 | Use '/' instead of ':' as separator for anchor path components. Note that | Daniel Hartmeier |
2004-05-19 | Allow recursive anchors (anchors within anchors, up to 64 | Daniel Hartmeier |
2004-05-05 | Use RFC1323 PAWS timestamps as a logical extension to the conventional TCP | Mike Frantzen |
2004-04-09 | Do not try to load directories. found+ok mpech@ | Cedric Berger |
2004-03-20 | make pfctl -s osfp work and remove -o option from manpage; ok deraadt@ | David Krause |
2004-03-15 | cast %llu arguments to unsigned long long, from Max Laier, | Daniel Hartmeier |
2004-03-03 | no newline in errx, bad cedric; spotted by tedu | Theo de Raadt |
2004-02-27 | make pfctl -s all a bit more useful again by not printing a lllooooooottttt of | Henning Brauer |
2004-02-26 | Fix/Simplify printing of titles with "pfctl -s all". ok mcbride@ | Cedric Berger |
2004-02-25 | Don't clear global stuff when an anchor is given in addition to -Fa. | Cedric Berger |
2004-02-19 | Makes pfctl -ss and pfctl -sq use optional -i argument. | Cedric Berger |
2004-02-19 | Makes pfctl -Fs and pfctl -w works with the optional -i specifier. | Cedric Berger |
2004-02-17 | add -i flag, use it for -sI as a start. ok henning@, ok+test mcbride@ | Cedric Berger |
2004-02-12 | - sort SYNOPSIS and options list | Jason McIntyre |
2004-02-12 | add -p flag to specify the device - ok mcbride@, henning@ with no objections | Bob Beck |
2004-02-10 | KNF | Daniel Hartmeier |
2004-02-10 | KNF | Henning Brauer |
2004-02-04 | Fix a number of bugs with setting pool limits which I introduced with | Ryan Thomas McBride |
2004-01-29 | Clean up 'pfctl -s all' output. | Ryan Thomas McBride |
2003-12-31 | spacing. note this, cedric | Theo de Raadt |
2003-12-31 | Many improvements to the handling of interfaces in PF. | Cedric Berger |
2003-12-19 | i wrote much of these, assert my copyright | Henning Brauer |
2003-12-16 | hostid is stored in network byte order, print in host byte order. | Ryan Thomas McBride |
2003-12-15 | Add initial support for pf state synchronization over the network. | Ryan Thomas McBride |
2003-12-15 | Add support to track stateful connections by source ip. This allows us | Ryan Thomas McBride |