| Age | Commit message (Expand) | Author |
|---|
| 2010-01-12 | First pass at removing the 'pf_pool' mechanism for translation and routing | Ryan Thomas McBride |
| 2010-01-10 | In the non-optimized case, an address list containing "any" (ie. { any 10.0.0... | Theo de Raadt |
| 2009-09-01 | the diff theo calls me insanae for: | Henning Brauer |
| 2009-04-06 | 1) scrub rules are completely gone. | Henning Brauer |
| 2007-10-13 | in all these programs using the same pfctl-derived parse.y, re-unify the | Theo de Raadt |
| 2006-10-31 | Allow a user to recursively print anchors including those without | Ryan Thomas McBride |
| 2006-10-31 | Allow pfctl ruleset optimizer to be controlled from the ruleset. | Ryan Thomas McBride |
| 2006-10-28 | Load all rules into memory before loading into the kernel, and add support | Ryan Thomas McBride |
| 2005-11-17 | for pfctl -f rules, open the file before resetting options. when opening | Daniel Hartmeier |
| 2005-10-13 | unused parameters | Henning Brauer |
| 2005-10-13 | dead defines | Henning Brauer |
| 2005-02-07 | KNF; ok henning@ | David Krause |
| 2005-01-05 | Modify pfctl behaviour so that 'set ...' options are no longer "sticky", ie. | Ryan Thomas McBride |
| 2004-12-22 | Introduce 'set skip on <ifspec>' to support a list of interfaces where no | Daniel Hartmeier |
| 2004-07-16 | 'pfctl -o' ruleset optimizer that doesnt change the meaning of the final ruleset | Mike Frantzen |
| 2004-05-19 | Allow recursive anchors (anchors within anchors, up to 64 | Daniel Hartmeier |
| 2004-04-14 | make antispoof work with dynamic addresses. ok dhartmei@ mcbride@ | Cedric Berger |
| 2004-02-10 | KNF | Daniel Hartmeier |
| 2004-01-29 | Clean up 'pfctl -s all' output. | Ryan Thomas McBride |
| 2003-12-31 | Many improvements to the handling of interfaces in PF. | Cedric Berger |
| 2003-12-15 | Add initial support for pf state synchronization over the network. | Ryan Thomas McBride |
| 2003-12-15 | Add support to track stateful connections by source ip. This allows us | Ryan Thomas McBride |
| 2003-11-14 | allow the debuglevel to be set from pf.conf (set debug) | Henning Brauer |
| 2003-09-26 | Rearchitecture of the userland/kernel IOCTL interface for transactions. | Cedric Berger |
| 2003-08-21 | Add Michal Zalewski's p0f v2 style passive OS fingerprinting to PF. | Mike Frantzen |
| 2003-07-31 | Make table tickets per-ruleset instead of global. | Cedric Berger |
| 2003-07-18 | Simplify handling of flags (-R, -N...). Remove PFCTL_FLAG_ALL. | Cedric Berger |
| 2003-07-11 | Better parsing and -v support for tables: | Cedric Berger |
| 2003-07-03 | Bye bye atexit(), bye bye globals... | Cedric Berger |
| 2003-07-03 | This patch finally cleanup pfctl_table.c. No more global buffer, | Cedric Berger |
| 2003-05-19 | reject invalid netmasks like 10.0.0.0/68, and fix up the netmask for | Henning Brauer |
| 2003-05-10 | support loading of anchors from within the main ruleset via | Henning Brauer |
| 2003-04-30 | Allow tables to be loaded into anchors. | Cedric Berger |
| 2003-04-15 | pass down the unparsed queue opts (struct node_queue_opt) to | Henning Brauer |
| 2003-04-14 | let print_altq and print_queue take a struct node_queue_bw parameter instead | Henning Brauer |
| 2003-04-13 | new struct node_hfsc_opts for, surprise, hfsc options. needed because they | Henning Brauer |
| 2003-04-13 | pass down the struct node_queue_opts from the altqif/queuespec yacc targets | Henning Brauer |
| 2003-04-13 | move the structs node_queue_bw and node_queue_opt to pfctl_parser.h. | Henning Brauer |
| 2003-04-05 | ease netmask handling a bit | Henning Brauer |
| 2003-04-03 | Simplify pfctl printing code. | Cedric Berger |
| 2003-03-27 | lotsa const char * | Henning Brauer |
| 2003-03-07 | don't include debugging output, namely, the result of teh skip steps | Henning Brauer |
| 2003-02-18 | fix load option handling (-A, -N, -R) for options. | Henning Brauer |
| 2003-02-16 | cosmetics | Henning Brauer |
| 2003-02-03 | remove loadopt global definition and cleanup a bit. | Cedric Berger |
| 2003-02-03 | fix a problem with queue definitions when load options (like -N etc) are | Henning Brauer |
| 2003-02-02 | there is no need to pass opts to parse_rules explicitely; it's passed as | Henning Brauer |
| 2003-02-02 | const'ify params for the host stuff | Henning Brauer |
| 2003-01-25 | Fix NOACTION with table statements. | Cedric Berger |
| 2003-01-25 | Permit initialisation of a table content from a file in pf.conf. | Cedric Berger |
