Age | Commit message (Expand) | Author |
2005-05-27 | Use rtm_fmask instead of rtm_use | Ryan Thomas McBride |
2005-05-27 | Hide Hostid and Checksum in pfctl -si output unless the -v flag is used. | Ryan Thomas McBride |
2005-05-27 | Calculate an MD5 checksum over the main pf ruleset. | Marco Pfatschbacher |
2005-05-27 | Make monitor.c use unsigned lengths in messages. Makes this compile | Chad Loder |
2005-05-27 | filtering on ruleset name is already implemented, document it. | Daniel Hartmeier |
2005-05-27 | show flow type (require, use, etc.) | Hans-Joerg Hoexer |
2005-05-27 | Additional paranoia. OK hshoexer | Chad Loder |
2005-05-27 | Use SADB_SATYPE_* instead of IPPROTO_* | Hans-Joerg Hoexer |
2005-05-27 | get rid of 'log-all'. now that we have 'log (options)', make 'all' an | Daniel Hartmeier |
2005-05-27 | get rid of shift/reduce conflicts, don't support empty logopts | Daniel Hartmeier |
2005-05-27 | log two pairs of uid/pid through pflog: the uid/pid of the process that | Daniel Hartmeier |
2005-05-27 | When looping over pfkey messages, make sure extension length is > 0. | Hans-Joerg Hoexer |
2005-05-27 | use new sysctl to retrieve flow informations including IDs | Hans-Joerg Hoexer |
2005-05-27 | o only pass signals from monitor to slave when pid is valid | Moritz Jodeit |
2005-05-27 | move m_state.s directly into must_{read,write} instead of passing | Moritz Jodeit |
2005-05-27 | remove unused table | Hans-Joerg Hoexer |
2005-05-27 | Support for dumping the SADB. | Hans-Joerg Hoexer |
2005-05-27 | Experimental support for opportunitic use of jumbograms where only some hosts | Ryan Thomas McBride |
2005-05-27 | guarantee nul-termination in the monitor, we must. ok cloder@ hshoexer@ | Moritz Jodeit |
2005-05-27 | allow 'tagged' in 'anchor' rules (without complaining about missing | Daniel Hartmeier |
2005-05-26 | simplify read/write between child and monitor | Hans-Joerg Hoexer |
2005-05-26 | Add ARGSUSED for lint, one comment for me | Hans-Joerg Hoexer |
2005-05-26 | The illegalness of "no nat log" is already enforced by the grammar. | Camiel Dobbelaar |
2005-05-26 | remove traces from union et al; pedro@ ok. | Federico G. Schwindt |
2005-05-26 | use PF_LOG, PF_LOGALL instead of numeric constants | Daniel Hartmeier |
2005-05-26 | support 'log' and 'log-all' in 'nat/rdr/binat pass' rules. original patch | Daniel Hartmeier |
2005-05-26 | Use TAILQ_FOREACH where possible, remove payload_last() | Hans-Joerg Hoexer |
2005-05-26 | add log_errorx() which doesn't print the errno value. ok hshoexer@ | Moritz Jodeit |
2005-05-26 | introduce ISAKMP_PAYLOAD_MAX | Hans-Joerg Hoexer |
2005-05-26 | get rid of payload mapping | Hans-Joerg Hoexer |
2005-05-26 | remove hiding of interface family groups | Henning Brauer |
2005-05-26 | Handle strdup returning NULL. OK hshoexer | Chad Loder |
2005-05-26 | switch the max_src_{states,conn,conn_rate} from superblock breaks to superblock | Mike Frantzen |
2005-05-26 | disallow interface group names that end in a digit to differentiate them from | Mike Frantzen |
2005-05-26 | remove reference to MNT_UNION | Pedro Martelletto |
2005-05-26 | bye bye | Pedro Martelletto |
2005-05-26 | remove the stackable filesystems | Pedro Martelletto |
2005-05-26 | Clean up some cleanup code. Fixes at least one leak, possibly more. | Chad Loder |
2005-05-25 | make the remaining pf_rule fields named superblock BREAKs instead just letting | Mike Frantzen |
2005-05-25 | make the optimizer safe in the presence of interface groups. they must act as | Mike Frantzen |
2005-05-25 | Fix a comment | Hans-Joerg Hoexer |
2005-05-25 | rearrange order of messages sent to the kernel | Hans-Joerg Hoexer |
2005-05-25 | set incoming flows to "use", outgoing to "require" | Hans-Joerg Hoexer |
2005-05-25 | prepare for new sysctl interface, not used yet | Hans-Joerg Hoexer |
2005-05-25 | do not swap srcid/dstid for INOUT rules. | Hans-Joerg Hoexer |
2005-05-25 | use bzero | Hans-Joerg Hoexer |
2005-05-25 | add ifconfig -M option to replace wicontrol -L and -l for ap scanning | Reyk Floeter |
2005-05-25 | aesctr and null support | Markus Friedl |
2005-05-24 | Identify states that will not be synchronised in pfctl -vvss output. | Christopher Pascoe |
2005-05-24 | fix minor ouput glitch, by using strtonum instead of strtol. | Moritz Jodeit |