Age | Commit message (Expand) | Author |
2002-05-24 | Support mixed (IPv4/v6) address lists, expand to all possible and valid | Daniel Hartmeier |
2002-05-23 | tiny KNF, some malloc checks, etc | Theo de Raadt |
2002-05-23 | new_addr is not used from anywhere. daniel@benzedrine.cx ok | Jun-ichiro itojun Hagino |
2002-05-19 | KNF | Theo de Raadt |
2002-05-19 | KNF | Theo de Raadt |
2002-05-19 | KNF | Theo de Raadt |
2002-05-19 | nicer usage | Theo de Raadt |
2002-05-18 | Handle long (unsigned 32-bit) IDs in print_uid/gid(). From Oleg Safiullin. | Daniel Hartmeier |
2002-05-12 | Explain that user/group 'unknown' can only be used with operators = and != | Daniel Hartmeier |
2002-05-12 | Add gid based filtering, reduce to one (effective) uid, rename parser | Daniel Hartmeier |
2002-05-10 | Handle host name resolution returning multiple addresses in the rule | Daniel Hartmeier |
2002-05-09 | Add a max-mss option to the scrub rule which will enforce a maximum mss | jasoni |
2002-05-09 | Introduce user based filtering. Rules can specify ruid and euid (real and | Daniel Hartmeier |
2002-05-05 | Instead of returning a useless kernel space pointer for the rule that | Daniel Hartmeier |
2002-04-24 | Add dynamic (in-kernel) interface name -> address translation. Instead of | Daniel Hartmeier |
2002-04-23 | Allow explicit filtering of fragments when they are not reassembled. | Daniel Hartmeier |
2002-04-18 | use strlcpy | Theo de Raadt |
2002-04-17 | Reset lineno for each file, so pfctl -R ... -N ... reports the right | Daniel Hartmeier |
2002-04-15 | Use in_addr_t instead of unsigned long, which breaks on alpha (64-bit). | Daniel Hartmeier |
2002-04-08 | Fix typo, from Raymond M Schneider | Daniel Hartmeier |
2002-04-01 | change return values back from EX_* to 0/1 | Daniel Hartmeier |
2002-04-01 | style(9) improvements from Raymond M Schneider | Daniel Hartmeier |
2002-03-28 | prototype pfctl_kill_states() | Daniel Hartmeier |
2002-03-27 | implement a "no-route" keyword. | Michael Shalayeff |
2002-03-26 | tidy up usage statement and sort headers. patch from dfa@solo.ee | Mike Frantzen |
2002-03-26 | sort options and clean up the -k descrption. patch from dfa@solo.ee | Mike Frantzen |
2002-03-25 | add -k option to shootdown all the state entries from the specified host | Mike Frantzen |
2002-03-21 | Add r option to SYNOPSIS. From Brian Poole. | Daniel Hartmeier |
2002-03-12 | Handle inet_ntop() returning NULL explicitly. Found by mpech@. | Daniel Hartmeier |
2002-03-11 | Add -r to reverse lookup addresses when displaying states. | Daniel Hartmeier |
2002-02-28 | Don't force /dev/pf to be opened read-write for pfctl -t/-m when values | Daniel Hartmeier |
2002-02-27 | Instead of printing useless @0 rule numbers from pfctl -vR, increase a | Daniel Hartmeier |
2002-02-26 | Add optional pool memory hard limits, mainly as temporary solution | Daniel Hartmeier |
2002-02-11 | Initial patch. | Mike Pechkin |
2002-01-11 | use bsearch() for keywords lookup, swap couple of entries to make the keyword... | Michael Shalayeff |
2002-01-10 | Let port 0 be specified as it's not special here. | Hugh Graham |
2002-01-09 | Port must be >0 and <=65535. Idea while have fun with ssh. | Mike Pechkin |
2002-01-09 | free() 'interface' in {nat,binat,rdr}rule | Mike Pechkin |
2002-01-09 | Add labels to rules. These are arbitrary names (not to be confused with | Daniel Hartmeier |
2002-01-08 | Add "no nat/rdr/binat" to nat.conf. The first matching rule applies. | Daniel Hartmeier |
2002-01-07 | Next issue: | Mike Pechkin |
2002-01-07 | remove 3rd argument from ipmask(), not used. | Mike Pechkin |
2002-01-06 | -x needs read-write access for DIOCSETDEBUG ioctl | Daniel Hartmeier |
2002-01-04 | check (p != NULL), not n. | Mike Pechkin |
2001-12-31 | only open device for writing if we gonna modify anything | Michael Shalayeff |
2001-12-23 | find correct line number in lval, instead of val | Theo de Raadt |
2001-12-21 | Initial patch for a new mdoc issue. | Mike Pechkin |
2001-12-13 | o) start new sentence on a new line; | Mike Pechkin |
2001-12-10 | Convert usage of 'you' to third person. Reword some sentences. | Daniel Hartmeier |
2001-12-10 | Add stateful filtering for other (non-TCP/UDP/ICMP) protocol, based on | Daniel Hartmeier |