Age | Commit message (Expand) | Author |
2002-12-30 | Change ipv6-icmp-type to icpm6-type. pf.conf files will need to be adjusted | Ryan Thomas McBride |
2002-12-18 | Store translation rule pointer in state entries, so pfctl -vsn can print | Daniel Hartmeier |
2002-12-17 | Match merge of pf_nat/pf_binat/pf_rdr structs into pf_rule | Ryan Thomas McBride |
2002-12-13 | allow a second queue for higher priorized (currently: tos=lowdelay) packets | Henning Brauer |
2002-12-07 | Support parameters in anchor rules. Allows conditional evaluation, like: | Daniel Hartmeier |
2002-12-07 | shadow cleanup | Henning Brauer |
2002-12-06 | let pfctl -v print out "block drop" instead of just "block" in the drop | Henning Brauer |
2002-12-06 | Introduce anchors and named rule sets, allowing to load additional rule | Daniel Hartmeier |
2002-12-05 | one step further to "program output is valid program input" and the related | Henning Brauer |
2002-11-30 | move unmask back into pf_print_state.c where it was, and please keep it there... | Michael Shalayeff |
2002-11-28 | - Remove extra space before -> in print_rdr | Ryan Thomas McBride |
2002-11-28 | - Adjust to match replacement of md5 with pf_hash | Ryan Thomas McBride |
2002-11-23 | Cosmetic fixes for print_*() functions, so they match the old regress | Daniel Hartmeier |
2002-11-23 | fix parens "(" ")" when printing | Ryan Thomas McBride |
2002-11-23 | KNF | Theo de Raadt |
2002-11-23 | Missing {} | Daniel Hartmeier |
2002-11-23 | check to make sure a list item exists before checking to see if the next | Ryan Thomas McBride |
2002-11-23 | missing prototype, remember to use sa_family_t for af | Ryan Thomas McBride |
2002-11-23 | code to support loading of pf rules with multiple redirection addresses | Ryan Thomas McBride |
2002-11-19 | minor cosmetics, space after "label %s", in case both label and queue are | Daniel Hartmeier |
2002-11-18 | KNF | Theo de Raadt |
2002-11-18 | altq and pf merged | Henning Brauer |
2002-10-25 | - more sa_family_t | Camiel Dobbelaar |
2002-10-22 | More conversion of "int af" and "u_int8_t af" declarations and function | Ryan Thomas McBride |
2002-10-14 | Allow one to specify a netblock in a binat rule: | Henning Brauer |
2002-10-07 | set block-policy [drop|return] | Henning Brauer |
2002-10-07 | support a generic return | Henning Brauer |
2002-10-07 | make return-icmp work for rules covering both v4 and v6 | Henning Brauer |
2002-10-07 | Add 'reply-to' to filter rules, similar to route-to, but applying to | Daniel Hartmeier |
2002-10-05 | Allow filtering based on IP header's tos field. | Daniel Hartmeier |
2002-07-20 | properly split yacc and lex use | Theo de Raadt |
2002-07-15 | add support for | Henning Brauer |
2002-07-01 | KNF | Theo de Raadt |
2002-06-27 | repair formatting - the new "enabled since" format is longer than the old | Henning Brauer |
2002-06-19 | "Enabled for Ss" -> "Enabled for D days HH:MM:SS", ok frantzen@ | Daniel Hartmeier |
2002-06-11 | split the grammar of scrub(fragcache) into scrub ... 'fragment reassemble', | Mike Frantzen |
2002-06-11 | SCRUB(fragcache) to do gap tracking and overlap pruning of IPv4 fragments | Mike Frantzen |
2002-06-11 | Make NAT proxy port range configurable per rule, for instance privileged | Daniel Hartmeier |
2002-06-11 | rework pfctl statistics display | Henning Brauer |
2002-06-10 | Allow ports to be specified in nat rules, useful later on for individual | Daniel Hartmeier |
2002-06-09 | Make pf_nat.saddr/daddr a pf_rule_addr instead of pf_addr_wrap, so it | Daniel Hartmeier |
2002-06-09 | spaced out developers... | Theo de Raadt |
2002-06-08 | Change remaining read-only lookup tables to const, suggestion drahn@ | Daniel Hartmeier |
2002-06-08 | pf_timeouts is shared between pfctl and authpf, put it in the shared file. | Dale Rahn |
2002-06-08 | Make state timeouts configurable per rule, like | Daniel Hartmeier |
2002-06-07 | add the possibility to configure a TTL while return-rst | Philipp Buehler |
2002-06-07 | Add "(max <number>)" option for "keep/modulate state" to limit the number | Daniel Hartmeier |
2002-06-07 | minor KNF while I'm here | Henning Brauer |
2002-06-06 | split out the pf_state printing functions to be used elsewhere, no functional... | Michael Shalayeff |
2002-06-01 | ECN flag support for pf. Committed in consultation with Daniel. | Hugh Graham |