| Age | Commit message (Expand) | Author |
|---|
| 2021-02-01 | change route-to so it sends packets to IPs instead of interfaces. | David Gwynne |
| 2021-01-12 | Sometimes a user ID was logged in pflog(4) although the logopt of | Alexander Bluhm |
| 2020-12-29 | getifaddrs() can return entries where ifa_addr is NULL. Check for this | Sebastian Benoit |
| 2020-05-15 | pf(4): use CLOCK_BOOTTIME to get time_uptime(9) in userspace | cheloha |
| 2019-10-17 | Use -1 to indicate an invalid uid/gid, not UID_MAX and GID_MAX. | Todd C. Miller |
| 2019-06-28 | When system calls indicate an error they return -1, not some arbitrary | Theo de Raadt |
| 2019-03-30 | Fail on invalid netmasks when filling tables | kn |
| 2019-01-29 | Reuse copy_satopfaddr() when killing entries | kn |
| 2018-09-16 | The kernel does not set the address family for the socket addresses | Alexander Bluhm |
| 2018-09-13 | Avoid unneeded variable in gen_dynnode() | kn |
| 2018-09-11 | Fix netmask regression in get_dynnode() | kn |
| 2018-09-11 | Remove unused buffer from host() | kn |
| 2018-09-10 | Merge host_v{4,6}() into simpler host_ip() | kn |
| 2018-09-10 | Introduce copy_satopfaddr() | kn |
| 2018-09-07 | More __func__ to fix error messages | kn |
| 2018-09-07 | Remove wildcard address on loopack remnants | kn |
| 2018-09-06 | Remove unused af argument from unmask() | kn |
| 2018-09-05 | Move AF-specific mask logic from callers into set_ipmask() | kn |
| 2018-09-05 | Use error label in host_if() | kn |
| 2018-08-10 | Zap bits in host_v4(), use mask parameter | kn |
| 2018-07-31 | Zap v4mask and v6mask in host() | kn |
| 2018-07-30 | Simplify host() | kn |
| 2018-07-28 | Use strtonum in host() | kn |
| 2018-07-24 | Move duplicate code into new helper print_addr_str() | kn |
| 2018-07-24 | Simplify getaddrinfo() error handling | kn |
| 2018-07-10 | 'set delay' for the generic packet delay mechanism, ok benno sashan | Henning Brauer |
| 2018-07-10 | Add "listenrepv2" for MLDv2 Listener Reports from RFC3810 | Jeremie Courreges-Anglas |
| 2018-02-08 | show current synflood detection watermarks in pfctl -vsi, for the lack | Henning Brauer |
| 2017-11-28 | The divert structure was using the port number to indicate that | Alexander Bluhm |
| 2017-11-13 | add a generic packet rate matching filter. allows things like | Henning Brauer |
| 2017-08-14 | expose the half-open tcp states counter, ok bluhm | Henning Brauer |
| 2017-08-11 | add option -N (no domain resolution) | Sebastian Benoit |
| 2017-08-03 | Since nearly 20 years the correct spelling of | Florian Obser |
| 2017-07-19 | Allow HFSC classes to use flow queues | Mike Belopuhov |
| 2017-06-01 | Return time_uptime as value for when pf was enabled instead of | Patrick Wildt |
| 2017-05-15 | Fixup printing of queue bandwidth specifications | Mike Belopuhov |
| 2017-05-15 | Hook up FQ-CoDel to the tree and enable configuration in the pfctl(8) | Mike Belopuhov |
| 2016-10-26 | When using a /32 IPv4 interface address, pfctl(8) reports a 0.0.0.0 | Alexander Bluhm |
| 2016-09-03 | Let purge thread to remove once rules, not packets. | Alexandr Nedvedicky |
| 2016-08-26 | Add <time.h> for time(); sort <*.h> includes | Philip Guenther |
| 2015-09-03 | interface should only be specified for root queues; found by jsg | Mike Belopuhov |
| 2015-06-03 | Do not assume that asprintf() clears the pointer on failure, which | Todd C. Miller |
| 2015-02-14 | Rather than using 0xff as a placeholder for "don't check prio", use 0xff to | Stuart Henderson |
| 2015-02-10 | since we inherit prio (as in, the queuing priority) from outside sources, | Henning Brauer |
| 2015-02-07 | parse debug levels with strtonum, so that debug 1banana doesn't parse. | Ted Unangst |
| 2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt |
| 2014-10-27 | Fixup incorrect expansion of the networking mask for dynamic interface | Mike Belopuhov |
| 2014-10-25 | Remove unnecessary netinet/in_systm.h include. | Lawrence Teo |
| 2014-01-20 | support "!received-on <interface>", ok dlg benno | Henning Brauer |
| 2013-11-22 | Whole bunch of (unsigned char) casts carefully added for ctype calls. | Theo de Raadt |
