Age | Commit message (Expand) | Author |
2014-01-20 | support "!received-on <interface>", ok dlg benno | Henning Brauer |
2013-11-22 | Whole bunch of (unsigned char) casts carefully added for ctype calls. | Theo de Raadt |
2013-10-28 | use %d instead of %i in a few fprintf for clarity | Theo de Raadt |
2013-10-12 | config bits for the bandwidth shaping part of the new queueing subsystem | Henning Brauer |
2013-08-01 | Provide local implementations of if_nametoindex(3) and if_indextoname(3) | Mike Belopuhov |
2013-04-21 | avoid truncating a time_t division into days | Theo de Raadt |
2013-01-16 | for consistency with prio etc, the queue assignment really belongs | Henning Brauer |
2012-12-04 | remove some unnecessary sys/param.h inclusions | Theo de Raadt |
2012-09-18 | prio 0 is valid, therefore, I chose an "impossible" value for prio meaning | Henning Brauer |
2012-07-10 | use PFSTATE_SCRUBMASK | Henning Brauer |
2012-07-10 | intermediate hack^Wugly "fix" to prevent spurious "scrub ()" prints | Henning Brauer |
2012-07-10 | set { ... } -> set ( ... ) | Henning Brauer |
2012-07-09 | fix some of the confusion we have in pf regarding filter criteria vs | Henning Brauer |
2012-07-07 | rename prio in struct pf_rule and related structs to set_prio so it is | Henning Brauer |
2011-12-12 | fixup af-to regression with match rules | Mike Belopuhov |
2011-11-23 | print ports as numbers by default; -P prints names instead | Henning Brauer |
2011-11-23 | print_rule: rename opts -> ropts, no binary change | Henning Brauer |
2011-10-13 | pfctl change for af-to / NAT64 support. | Claudio Jeker |
2011-08-30 | One shot rules can be used in pf.conf by specifying a "once" filter option. | Mike Belopuhov |
2011-07-27 | Add support for weighted round-robin in load balancing pools and tables. | Ryan Thomas McBride |
2011-07-08 | allow rules to specify "prio X" or "prio (X, Y)" to assign priority levels | Henning Brauer |
2011-07-07 | Don't print 'keep state' anymore unless it's needed for state options, it's | Ryan Thomas McBride |
2011-07-03 | bring in least-states load balancing algorithm | Joerg Zinke |
2011-04-06 | Userland bits to allow PF to filter on the rdomain a packet belongs to. | Claudio Jeker |
2011-04-05 | ditch fastroute, an ipf feature that made its way into pf before | Mike Belopuhov |
2011-01-23 | 'pfctl -x none' did not turn debugging off. Skip the syslog internal | Alexander Bluhm |
2010-10-12 | pfctl -sr did not show divert-reply rules without address family | Alexander Bluhm |
2010-09-22 | new log opt "matches" | Henning Brauer |
2010-09-02 | remove trailing spaces and tabs; no binary change. | Igor Sobrado |
2010-07-13 | Fix (pflow) display in rule printing. Spotted by dhill@, ok henning@ | Stuart Henderson |
2010-07-03 | Fix a couple of problems with printing of anchors, in particular recursive | Ryan Thomas McBride |
2010-07-03 | Use our own enum here rather than abusing the PF rule type enums, which | Ryan Thomas McBride |
2010-06-29 | Fix use after free. Found by regress tests. | Charles Longeau |
2010-05-16 | plug memory leak. `ps' was allocated with strdup(3), but on error path | zinovik |
2010-03-22 | Following diff fixes memory leak. `debug' is allocated via asprintf(3) so we | Theo de Raadt |
2010-03-18 | Fix rdr-to printing in pfctl -sr when reply-to is in use. | Stuart Henderson |
2010-01-18 | Convert pf debug logging to using log()/addlog(), a single standardised | Ryan Thomas McBride |
2010-01-13 | repair a double-free suggested by parfait; ok mcbride | Theo de Raadt |
2010-01-13 | fix some leaks found by parfait | Jonathan Gray |
2010-01-12 | Only print route specs with @if notation if there is an IP address. | Ryan Thomas McBride |
2010-01-12 | Unbreak 10/8 and friends. | Ryan Thomas McBride |
2010-01-12 | Fix some issues in redir spec handling, discovered thanks to dlg testing | Ryan Thomas McBride |
2010-01-12 | First pass at removing the 'pf_pool' mechanism for translation and routing | Ryan Thomas McBride |
2009-12-24 | spelling fixes, from Brad Tilley; we will not fix src/sbin/dump/dump.h | Igor Sobrado |
2009-12-24 | add support to pf for filtering a packet by the interface it was received | David Gwynne |
2009-12-14 | fix sticky-address - by pretty much re-implementing it. still following | Henning Brauer |
2009-11-23 | since "nat/rdr pass" are history natpass can go | Henning Brauer |
2009-11-22 | cleanup after the NAT changes. we used to have multiple rulesets (scrub, | Henning Brauer |
2009-10-28 | Add a dedicated pf pool for route options as suggested by henning, | Jonathan Gray |
2009-10-04 | Add (again) support for divert sockets. They allow you to: | Michele Marchetto |