| Age | Commit message (Expand) | Author |
|---|
| 2021-10-25 | - pfctl $nr incorrect macro expansion | Alexandr Nedvedicky |
| 2020-07-21 | rename PF_OPT_TABLE_PREFIX to PF_OPTIMIZER_TABLE_PFX and move it to pfvar.h | Henning Brauer |
| 2020-01-15 | Enable pfctl(8) to recursively flush rules and tables from PF driver. The | Alexandr Nedvedicky |
| 2019-03-07 | Remove pfctl_*_pool() remnants | kn |
| 2019-03-06 | Fix once rules | kn |
| 2019-01-29 | Reuse copy_satopfaddr() when killing entries | kn |
| 2018-09-06 | Remove unused af argument from unmask() | kn |
| 2018-09-05 | Move AF-specific mask logic from callers into set_ipmask() | kn |
| 2018-02-08 | make the watermarks/thresholds for entering and leaving syncookie mode when | Henning Brauer |
| 2018-02-08 | show current synflood detection watermarks in pfctl -vsi, for the lack | Henning Brauer |
| 2018-02-06 | allow control over syncookies: set syncookies never/always/adaptive | Henning Brauer |
| 2017-11-25 | - patching use-after-free and innocent memory leak in pfctl_optimzie.c | Alexandr Nedvedicky |
| 2017-08-11 | add option -N (no domain resolution) | Sebastian Benoit |
| 2016-07-18 | no more cbq_opts - CBQ is gone, ok mpi phessler benno | Henning Brauer |
| 2014-10-27 | Fixup incorrect expansion of the networking mask for dynamic interface | Mike Belopuhov |
| 2014-08-23 | when you specify queues in a rule, make sure they have been defined. | Martin Pelikan |
| 2014-04-19 | remove altq bits here, too | Henning Brauer |
| 2013-10-12 | config bits for the bandwidth shaping part of the new queueing subsystem | Henning Brauer |
| 2013-08-01 | Provide local implementations of if_nametoindex(3) and if_indextoname(3) | Mike Belopuhov |
| 2011-12-03 | pfctl_set_hostid always returns 0; don't pretend otherwise and make it a | Ryan Thomas McBride |
| 2011-11-23 | print ports as numbers by default; -P prints names instead | Henning Brauer |
| 2011-07-27 | Add support for weighted round-robin in load balancing pools and tables. | Ryan Thomas McBride |
| 2011-07-03 | bring in least-states load balancing algorithm | Joerg Zinke |
| 2011-04-06 | Userland bits to allow PF to filter on the rdomain a packet belongs to. | Claudio Jeker |
| 2010-06-25 | remove -m (merge). | Henning Brauer |
| 2010-03-23 | remove -A, -O, -R and -T load | Henning Brauer |
| 2010-01-18 | Convert pf debug logging to using log()/addlog(), a single standardised | Ryan Thomas McBride |
| 2010-01-12 | First pass at removing the 'pf_pool' mechanism for translation and routing | Ryan Thomas McBride |
| 2010-01-10 | In the non-optimized case, an address list containing "any" (ie. { any 10.0.0... | Theo de Raadt |
| 2009-09-01 | the diff theo calls me insanae for: | Henning Brauer |
| 2009-04-06 | 1) scrub rules are completely gone. | Henning Brauer |
| 2007-10-13 | in all these programs using the same pfctl-derived parse.y, re-unify the | Theo de Raadt |
| 2006-10-31 | Allow a user to recursively print anchors including those without | Ryan Thomas McBride |
| 2006-10-31 | Allow pfctl ruleset optimizer to be controlled from the ruleset. | Ryan Thomas McBride |
| 2006-10-28 | Load all rules into memory before loading into the kernel, and add support | Ryan Thomas McBride |
| 2005-11-17 | for pfctl -f rules, open the file before resetting options. when opening | Daniel Hartmeier |
| 2005-10-13 | unused parameters | Henning Brauer |
| 2005-10-13 | dead defines | Henning Brauer |
| 2005-02-07 | KNF; ok henning@ | David Krause |
| 2005-01-05 | Modify pfctl behaviour so that 'set ...' options are no longer "sticky", ie. | Ryan Thomas McBride |
| 2004-12-22 | Introduce 'set skip on <ifspec>' to support a list of interfaces where no | Daniel Hartmeier |
| 2004-07-16 | 'pfctl -o' ruleset optimizer that doesnt change the meaning of the final ruleset | Mike Frantzen |
| 2004-05-19 | Allow recursive anchors (anchors within anchors, up to 64 | Daniel Hartmeier |
| 2004-04-14 | make antispoof work with dynamic addresses. ok dhartmei@ mcbride@ | Cedric Berger |
| 2004-02-10 | KNF | Daniel Hartmeier |
| 2004-01-29 | Clean up 'pfctl -s all' output. | Ryan Thomas McBride |
| 2003-12-31 | Many improvements to the handling of interfaces in PF. | Cedric Berger |
| 2003-12-15 | Add initial support for pf state synchronization over the network. | Ryan Thomas McBride |
| 2003-12-15 | Add support to track stateful connections by source ip. This allows us | Ryan Thomas McBride |
| 2003-11-14 | allow the debuglevel to be set from pf.conf (set debug) | Henning Brauer |
