Age | Commit message (Expand) | Author |
2001-09-02 | Print rule numbers zero-based. Noted by primus@gblx.net. | Daniel Hartmeier |
2001-08-25 | PF ISN randomization. Or in trekkie techno-babble, ISN phase modulation. | Mike Frantzen |
2001-08-23 | KNF | Theo de Raadt |
2001-08-19 | Unfuck some TCP state stuff that would drop the SYN|ACK. | Mike Frantzen |
2001-08-18 | prettier printing of states | Theo de Raadt |
2001-08-16 | track the line number per-token, so that we can report errors correctly | Theo de Raadt |
2001-08-11 | Add support for ICMP errors referring to ICMP queries/replies. Fixes | Daniel Hartmeier |
2001-07-19 | Fix/complete the handling of the binary ops >< and <> to behave | Kenneth R Westerback |
2001-07-17 | markus doesnt like min-ttl =, begone | Niels Provos |
2001-07-17 | support min-ttl, okay dhartmei@ | Niels Provos |
2001-07-17 | normalize ip_off, make IP_DF stripping optional, return rst is a flag now. | Niels Provos |
2001-07-16 | add a yacc parser for pf.conf and nat.conf, with help from mickey@, | Markus Friedl |
2001-07-11 | Error on invalid ports | Constantine Sapuntzakis |
2001-07-10 | Oops, we can't use 0 as next_addr()'s error return since 0.0.0.0 is | Todd C. Miller |
2001-07-10 | Resolve as a host name if not an IP address; dhartmei@ OK | Todd C. Miller |
2001-07-10 | move "proto" in the nat case as well | Todd C. Miller |
2001-07-09 | Move the proto field to be after the "on" argument which is consistent | Todd C. Miller |
2001-07-09 | Extend nat/rdr syntax. Add source/destination selection. Make | Daniel Hartmeier |
2001-07-06 | Allow negative match on interface name for nat and rdr | Chris Cappuccio |
2001-07-04 | cleaner | Theo de Raadt |
2001-07-04 | add new icmp codes and types as symbolic names, ok deraadt | Peter Stromberg |
2001-07-01 | tag packets generated by pf (return-rst, return-icmp) so they are not filtere... | Daniel Hartmeier |
2001-07-01 | Add port ranges to the rdr directive. Connections can be redirected | Kjell Wooding |
2001-07-01 | Always print filter statistics, even when the filter is disabled. | Kjell Wooding |
2001-06-29 | fix counter/reason array usage | Daniel Hartmeier |
2001-06-28 | support scrub directive. somebody please please BNF yaccify this. | Niels Provos |
2001-06-27 | print inbound packets passed correctly | Daniel Hartmeier |
2001-06-27 | state counter changes | Theo de Raadt |
2001-06-27 | make it understand protocol numbers, too | Niels Provos |
2001-06-26 | name comparison operators | Dug Song |
2001-06-26 | int -> unsigned, so -Wall is happy | Daniel Hartmeier |
2001-06-26 | array of counters indexed by reason codes | Theo de Raadt |
2001-06-26 | add rule nr for Niels | Daniel Hartmeier |
2001-06-26 | add rule pointer and log option to states | Daniel Hartmeier |
2001-06-26 | Print statistics in a human readable format. ok dhartmei | Kjell Wooding |
2001-06-26 | symbolic names for icmp-type and codes, ok deraadt@ | Peter Stromberg |
2001-06-26 | add space after line number; wilfried@ | Daniel Hartmeier |
2001-06-26 | allow 0.0.0.0/x in rules | Peter Stromberg |
2001-06-25 | more sync against kernel changes | Theo de Raadt |
2001-06-25 | catch up, might have introduced bugs, but there is a next pass... | Theo de Raadt |
2001-06-25 | catch up to Art changes in the kernel | Theo de Raadt |
2001-06-25 | Replace magic numbers 1, 6, and 17 with IPPROTO_{ICMP,UDP,TCP}. deraadt@ ok. | smart |
2001-06-24 | some KNF | Niels Provos |
2001-06-24 | match changes in header files | Theo de Raadt |
2001-06-24 | REGENTS -> COPYRIGHT HOLDERS | Daniel Hartmeier |
2001-06-24 | Move and rename packet filter userland. | Kjell Wooding |