Age | Commit message (Expand) | Author |
2018-02-08 | make the watermarks/thresholds for entering and leaving syncookie mode when | Henning Brauer |
2018-02-08 | show current synflood detection watermarks in pfctl -vsi, for the lack | Henning Brauer |
2018-02-06 | allow control over syncookies: set syncookies never/always/adaptive | Henning Brauer |
2017-11-25 | - patching use-after-free and innocent memory leak in pfctl_optimzie.c | Alexandr Nedvedicky |
2017-08-11 | add option -N (no domain resolution) | Sebastian Benoit |
2016-07-18 | no more cbq_opts - CBQ is gone, ok mpi phessler benno | Henning Brauer |
2014-10-27 | Fixup incorrect expansion of the networking mask for dynamic interface | Mike Belopuhov |
2014-08-23 | when you specify queues in a rule, make sure they have been defined. | Martin Pelikan |
2014-04-19 | remove altq bits here, too | Henning Brauer |
2013-10-12 | config bits for the bandwidth shaping part of the new queueing subsystem | Henning Brauer |
2013-08-01 | Provide local implementations of if_nametoindex(3) and if_indextoname(3) | Mike Belopuhov |
2011-12-03 | pfctl_set_hostid always returns 0; don't pretend otherwise and make it a | Ryan Thomas McBride |
2011-11-23 | print ports as numbers by default; -P prints names instead | Henning Brauer |
2011-07-27 | Add support for weighted round-robin in load balancing pools and tables. | Ryan Thomas McBride |
2011-07-03 | bring in least-states load balancing algorithm | Joerg Zinke |
2011-04-06 | Userland bits to allow PF to filter on the rdomain a packet belongs to. | Claudio Jeker |
2010-06-25 | remove -m (merge). | Henning Brauer |
2010-03-23 | remove -A, -O, -R and -T load | Henning Brauer |
2010-01-18 | Convert pf debug logging to using log()/addlog(), a single standardised | Ryan Thomas McBride |
2010-01-12 | First pass at removing the 'pf_pool' mechanism for translation and routing | Ryan Thomas McBride |
2010-01-10 | In the non-optimized case, an address list containing "any" (ie. { any 10.0.0... | Theo de Raadt |
2009-09-01 | the diff theo calls me insanae for: | Henning Brauer |
2009-04-06 | 1) scrub rules are completely gone. | Henning Brauer |
2007-10-13 | in all these programs using the same pfctl-derived parse.y, re-unify the | Theo de Raadt |
2006-10-31 | Allow a user to recursively print anchors including those without | Ryan Thomas McBride |
2006-10-31 | Allow pfctl ruleset optimizer to be controlled from the ruleset. | Ryan Thomas McBride |
2006-10-28 | Load all rules into memory before loading into the kernel, and add support | Ryan Thomas McBride |
2005-11-17 | for pfctl -f rules, open the file before resetting options. when opening | Daniel Hartmeier |
2005-10-13 | unused parameters | Henning Brauer |
2005-10-13 | dead defines | Henning Brauer |
2005-02-07 | KNF; ok henning@ | David Krause |
2005-01-05 | Modify pfctl behaviour so that 'set ...' options are no longer "sticky", ie. | Ryan Thomas McBride |
2004-12-22 | Introduce 'set skip on <ifspec>' to support a list of interfaces where no | Daniel Hartmeier |
2004-07-16 | 'pfctl -o' ruleset optimizer that doesnt change the meaning of the final ruleset | Mike Frantzen |
2004-05-19 | Allow recursive anchors (anchors within anchors, up to 64 | Daniel Hartmeier |
2004-04-14 | make antispoof work with dynamic addresses. ok dhartmei@ mcbride@ | Cedric Berger |
2004-02-10 | KNF | Daniel Hartmeier |
2004-01-29 | Clean up 'pfctl -s all' output. | Ryan Thomas McBride |
2003-12-31 | Many improvements to the handling of interfaces in PF. | Cedric Berger |
2003-12-15 | Add initial support for pf state synchronization over the network. | Ryan Thomas McBride |
2003-12-15 | Add support to track stateful connections by source ip. This allows us | Ryan Thomas McBride |
2003-11-14 | allow the debuglevel to be set from pf.conf (set debug) | Henning Brauer |
2003-09-26 | Rearchitecture of the userland/kernel IOCTL interface for transactions. | Cedric Berger |
2003-08-21 | Add Michal Zalewski's p0f v2 style passive OS fingerprinting to PF. | Mike Frantzen |
2003-07-31 | Make table tickets per-ruleset instead of global. | Cedric Berger |
2003-07-18 | Simplify handling of flags (-R, -N...). Remove PFCTL_FLAG_ALL. | Cedric Berger |
2003-07-11 | Better parsing and -v support for tables: | Cedric Berger |
2003-07-03 | Bye bye atexit(), bye bye globals... | Cedric Berger |
2003-07-03 | This patch finally cleanup pfctl_table.c. No more global buffer, | Cedric Berger |
2003-05-19 | reject invalid netmasks like 10.0.0.0/68, and fix up the netmask for | Henning Brauer |