| Age | Commit message (Expand) | Author |
|---|
| 2014-06-25 | pf_translate doesn't use the mbuf argument anymore. | Mike Belopuhov |
| 2013-11-16 | Remove dead assignments and now unused variables. | Charles Longeau |
| 2013-10-24 | Remove the number of in6_var.h inclusions by moving some functions and | Martin Pieuchot |
| 2013-10-23 | Remove the number of in_var.h inclusions by moving some functions and | Martin Pieuchot |
| 2013-10-17 | The header file netinet/in_var.h included netinet6/in6_var.h. This | Alexander Bluhm |
| 2013-06-26 | put the cksum diff back, of course with the bug fixed where we could | Henning Brauer |
| 2013-03-26 | Remove various read-only *maxlen variables and use IFQ_MAXLEN directly. | Martin Pieuchot |
| 2012-11-06 | backout csum diff for the moment, requested by theo | Henning Brauer |
| 2012-11-01 | redo most of the protocol (tcp/udp/...) checksum handling | Henning Brauer |
| 2012-07-08 | there was a limit on the number of pflog interfaces - 16. remove that. | Henning Brauer |
| 2012-02-03 | The kernel did not compile without INET6. Put some #ifdefs into | Alexander Bluhm |
| 2012-01-27 | If some length checks in pflog_bpfcopy() failed, the function | Alexander Bluhm |
| 2012-01-15 | Calling pf_normalize_ip() from pf_setup_pdesc() was bad as the | Alexander Bluhm |
| 2011-12-21 | don't attempt to run pf_translate on fragments: it will fail miserably. | Mike Belopuhov |
| 2011-10-21 | strengthen some checks to prevent m_copy* routines from operating | Mike Belopuhov |
| 2011-10-13 | Since the IPv6 madness is not enough introduce NAT64 -- which is actually | Claudio Jeker |
| 2011-09-28 | As requested by henning, move the mbuf pointer into struct pf_pdesc. | Alexander Bluhm |
| 2011-09-20 | Put kif and dir into pdesc an use this instead of passing the values | Alexander Bluhm |
| 2011-09-19 | Consolidate pf function parameters. Move off and hdrlen into pdesc | Alexander Bluhm |
| 2011-09-18 | Move the pdesc initialization code into pf_setup_pdesc(). Unify | Alexander Bluhm |
| 2011-09-18 | Move the call to pf_test_rule() for fragments that have not been | Alexander Bluhm |
| 2011-07-07 | Fold pf_test_fragment() into pf_test_rule(), reduce code and fixes | Ryan Thomas McBride |
| 2011-07-06 | cosnistently use IFQ_SET_MAXLEN, surfaced in a discussion with + ok bluhm | Henning Brauer |
| 2011-07-05 | Explicitly reserve space for special ICMP6 headers in pf_hdrs, like | Alexander Bluhm |
| 2011-06-20 | More cleanup in pf_test/pf_test6 this time mostly the fragment | Claudio Jeker |
| 2011-05-22 | Do not pass AF specific information to pf_test_rule() and PFLOG_PACKET() | Claudio Jeker |
| 2010-12-07 | remove a bunch of unused arguments | Jonathan Gray |
| 2010-09-21 | Don't dereference null pointers for protocols without port numbers. | Stuart Henderson |
| 2010-09-21 | assert copyrights / bump years | Henning Brauer |
| 2010-09-21 | stuff the original (before rewriting) addresses into the already existant | Henning Brauer |
| 2010-09-21 | pflog overhaul | Henning Brauer |
| 2010-01-12 | Remove bpfdetach() call right in front of the if_detach() call since | Claudio Jeker |
| 2007-12-20 | return with ENOTTY instead of EINVAL for unknown ioctl requests. | Brad Smith |
| 2007-10-18 | There is no point for IP addresses on pflog(4) | Marco Pfatschbacher |
| 2007-09-16 | another M_ZERO diff. | Pierre-Yves Ritschard |
| 2007-05-26 | one extern seems to be better than 20 for ifqmaxlen; ok krw | Jason Wright |
| 2007-03-19 | no longer create a pflog0 by default. | Henning Brauer |
| 2006-12-15 | make pflog(4) count; ok hennig@ deraadt@ | Otto Moerbeek |
| 2006-11-01 | Attach pfsync0 and pflog0 by default like they used to, /etc/rc depends on | Ryan Thomas McBride |
| 2006-10-25 | add a "u_int8_t logif" to struct pfrule to select to which pflog interface | Henning Brauer |
| 2006-10-23 | make the pflog interface clonable. | Henning Brauer |
| 2006-06-28 | Another unused function bites the dust -- this time pflogrtrequest(). OK markus@ | Claudio Jeker |
| 2006-03-25 | allow bpf(4) to ignore packets based on their direction (inbound or | Damien Miller |
| 2006-03-04 | With the exception of two other small uncommited diffs this moves | Brad Smith |
| 2005-07-31 | Introduce bpf_mtap_af and bpf_mtap_hdr to be used when passing a mbuf chain | Christopher Pascoe |
| 2005-05-27 | pass UID_MAX/NO_PID when the socket lookup failed, so tcpdump can | Daniel Hartmeier |
| 2005-05-27 | log two pairs of uid/pid through pflog: the uid/pid of the process that | Daniel Hartmeier |
| 2004-05-19 | Allow recursive anchors (anchors within anchors, up to 64 | Daniel Hartmeier |
| 2003-12-31 | Many improvements to the handling of interfaces in PF. | Cedric Berger |
| 2003-10-01 | Fix stack leak into pfloghdr (the pad field is not initialized), | Can Erkin Acar |
