Age | Commit message (Expand) | Author |
---|---|---|
2006-03-14 | implement a Unicast Reverse Path Forwarding (uRPF) check for pf(4) | Damien Miller |
2005-06-13 | make the packet and byte counters on rules and src nodes per direction, | Henning Brauer |
2005-05-26 | switch the max_src_{states,conn,conn_rate} from superblock breaks to superblock | Mike Frantzen |
2005-05-25 | make the remaining pf_rule fields named superblock BREAKs instead just letting | Mike Frantzen |
2005-05-25 | make the optimizer safe in the presence of interface groups. they must act as | Mike Frantzen |
2005-01-03 | don't merge a rule's source address into a table if we're already trying to | Mike Frantzen |
2004-12-14 | &&/|| inversion would try to merge IP addresses with non-addresses into a | Mike Frantzen |
2004-12-14 | add two warn() calls to make sure a warning message gets printed if one of | Mike Frantzen |
2004-08-08 | spacing | Theo de Raadt |
2004-07-16 | 'pfctl -o' ruleset optimizer that doesnt change the meaning of the final ruleset | Mike Frantzen |