| Age | Commit message (Expand) | Author |
|---|
| 2006-11-20 | -K argument to kill source tracking nodes explicitly, behaves like the | Ryan Thomas McBride |
| 2006-11-07 | Only try to recursively print rules if they are actually anchors. | Ryan Thomas McBride |
| 2006-11-07 | Unbreak authpf by handling non-inline anchors separately from the { } anchors | Ryan Thomas McBride |
| 2006-11-05 | Don't open a transaction for a ruleset unless it's a brace ruleset that | Ryan Thomas McBride |
| 2006-11-01 | sync usage(); ok mcbride | Jason McIntyre |
| 2006-11-01 | Don't recures ALL the time. | Ryan Thomas McBride |
| 2006-10-31 | Allow a user to recursively print anchors including those without | Ryan Thomas McBride |
| 2006-10-31 | Allow pfctl ruleset optimizer to be controlled from the ruleset. | Ryan Thomas McBride |
| 2006-10-31 | - don't allow anchors with _* names to be cleared or loaded from the | Ryan Thomas McBride |
| 2006-10-28 | Load all rules into memory before loading into the kernel, and add support | Ryan Thomas McBride |
| 2006-06-30 | spaces | Theo de Raadt |
| 2006-05-28 | Enable adaptive timeouts by default, with adaptive.start of 60% of the | Ryan Thomas McBride |
| 2006-04-24 | don't clear interface flags (set skip on) when -N/-F is used without -O, | Daniel Hartmeier |
| 2005-11-17 | for pfctl -f rules, open the file before resetting options. when opening | Daniel Hartmeier |
| 2005-07-11 | clear PFI_IFLAG_SKIP when clearing interface flags, found by David Hill, | Daniel Hartmeier |
| 2005-06-13 | make the packet and byte counters on rules and src nodes per direction, | Henning Brauer |
| 2005-06-13 | free memory in show_src_nodes and show_states, as reported by | Jared Yanovich |
| 2005-05-28 | don't print the "[ Inserted: uid pid ]" line when -g is used, so the | Daniel Hartmeier |
| 2005-05-27 | log two pairs of uid/pid through pflog: the uid/pid of the process that | Daniel Hartmeier |
| 2005-05-23 | change pool allocation of table entries, no longer use the oldnointr | Daniel Hartmeier |
| 2005-05-22 | Add support to kill states that match networks. | Marco Pfatschbacher |
| 2005-05-21 | clean up and rework the interface absraction code big time, rip out multiple | Henning Brauer |
| 2005-05-05 | typo | Joel Knight |
| 2005-03-07 | fd leaks in error paths, From: Andrey Matveev <andrushock@korovino.net> | Henning Brauer |
| 2005-03-06 | print "set skip on" with -v in such a way that the output is valid input | Daniel Hartmeier |
| 2005-01-06 | Missing braces in pfctl_load_debug(), pointed out by camield@ | Ryan Thomas McBride |
| 2005-01-05 | Modify pfctl behaviour so that 'set ...' options are no longer "sticky", ie. | Ryan Thomas McBride |
| 2004-12-29 | change last commit so that the test for PF_OPT_NOACTION is actually in | Dan Harnett |
| 2004-12-29 | don't clear interface flags if '-n' option was given. | Dan Harnett |
| 2004-12-29 | be quiet about resetting the interface flags omn ruleset load, only | Henning Brauer |
| 2004-12-28 | reset skip interface flags on reloads and for -Fall | Henning Brauer |
| 2004-12-27 | unbreak tree | Theo de Raadt |
| 2004-12-27 | reset skip interface flags on reloads and for -Fall | Henning Brauer |
| 2004-12-22 | Introduce 'set skip on <ifspec>' to support a list of interfaces where no | Daniel Hartmeier |
| 2004-09-21 | Implement "no scrub" to allow exclusion of specific traffic from scrub rules. | Aaron Campbell |
| 2004-08-26 | sync usage for -a | Jared Yanovich |
| 2004-08-08 | spacing | Theo de Raadt |
| 2004-07-23 | - make SYNOPSIS and usage() clear that -t precedes -T; | Jason McIntyre |
| 2004-07-19 | print the correct labels when displaying timeouts with pfctl (eg, pfctl -st). | David Gwynne |
| 2004-07-16 | 'pfctl -o' ruleset optimizer that doesnt change the meaning of the final ruleset | Mike Frantzen |
| 2004-05-21 | Use '/' instead of ':' as separator for anchor path components. Note that | Daniel Hartmeier |
| 2004-05-19 | Allow recursive anchors (anchors within anchors, up to 64 | Daniel Hartmeier |
| 2004-05-05 | Use RFC1323 PAWS timestamps as a logical extension to the conventional TCP | Mike Frantzen |
| 2004-04-09 | Do not try to load directories. found+ok mpech@ | Cedric Berger |
| 2004-03-20 | make pfctl -s osfp work and remove -o option from manpage; ok deraadt@ | David Krause |
| 2004-03-15 | cast %llu arguments to unsigned long long, from Max Laier, | Daniel Hartmeier |
| 2004-03-03 | no newline in errx, bad cedric; spotted by tedu | Theo de Raadt |
| 2004-02-27 | make pfctl -s all a bit more useful again by not printing a lllooooooottttt of | Henning Brauer |
| 2004-02-26 | Fix/Simplify printing of titles with "pfctl -s all". ok mcbride@ | Cedric Berger |
| 2004-02-25 | Don't clear global stuff when an anchor is given in addition to -Fa. | Cedric Berger |
