| Age | Commit message (Expand) | Author |
|---|
| 2007-06-26 | Fix a race condition during ruleset reload; make sure we don't walk off | Ryan Thomas McBride |
| 2007-06-25 | pretty mechanical change: now that the state tables use seperate state | Henning Brauer |
| 2007-06-24 | Save some bytes and make code more readable by removing junk union and | Ryan Thomas McBride |
| 2007-06-21 | reimplement interface bound states in a non-retarded way. | Henning Brauer |
| 2007-06-14 | sprinkle some #ifdef IPSEC so that pfsync compiles w/o ipsec | Henning Brauer |
| 2007-06-01 | factor out duplicated code to allocate state key and cross-reference it | Henning Brauer |
| 2007-05-31 | unlink the right state, ryan ok | Henning Brauer |
| 2007-05-31 | Move the state id and creatorid (used mainly by pfsync) into struct pf_state. | Ryan Thomas McBride |
| 2007-05-31 | First step of rearranging pf's state table internals... | Ryan Thomas McBride |
| 2007-05-26 | one extern seems to be better than 20 for ifqmaxlen; ok krw | Jason Wright |
| 2006-11-16 | no need to always attach pfsync0 any more. ok mpf mcbride | Henning Brauer |
| 2006-11-01 | Attach pfsync0 and pflog0 by default like they used to, /etc/rc depends on | Ryan Thomas McBride |
| 2006-11-01 | remove redundant null check, ok ryan | Henning Brauer |
| 2006-10-31 | slightly improve consustency and readability, no functional change | Henning Brauer |
| 2006-10-31 | in pfsync_update_tdb, when there is no pfsync interface, we must return | Henning Brauer |
| 2006-10-31 | hard to believe people still manage to commit non-compiling code once in a while | Theo de Raadt |
| 2006-10-31 | make pfsync a clonable too, but prevent more than one instance from | Henning Brauer |
| 2006-06-02 | Introduce attributes to interface groups. | Marco Pfatschbacher |
| 2006-05-28 | Only preemptively increase the replay counter for outbound TDBs. | Ryan Thomas McBride |
| 2006-05-13 | Avoid potential hash collisions and increase efficiency by doing an exact | Ryan Thomas McBride |
| 2006-05-06 | The SPI in a TDB is actually stored in network order. Make sa synchronisation | Ryan Thomas McBride |
| 2006-03-25 | allow bpf(4) to ignore packets based on their direction (inbound or | Damien Miller |
| 2006-03-04 | With the exception of two other small uncommited diffs this moves | Brad Smith |
| 2006-02-20 | Fix kernel builds without bpfilter. Linking is still broken. | Damien Bergamini |
| 2005-11-04 | crank pf_state and pf_src_node byte and packet counters to u_in64_t, since | Ryan Thomas McBride |
| 2005-11-01 | Always sure that we have memory for the 'dst' scrub information, which may | Christopher Pascoe |
| 2005-10-28 | s/rmatch/chksum_flag/ to clarify what's going on. Pointed out by dhartmei@ | Ryan Thomas McBride |
| 2005-10-27 | Basic support for attaching states from pfsync to the correct rules. | Ryan Thomas McBride |
| 2005-09-28 | Improve the safety of pf IOCTLs, taking into account that some paths can sleep. | Christopher Pascoe |
| 2005-08-18 | Rearrange pf_state and pfi_kif so that the parts of the structure needed | Christopher Pascoe |
| 2005-08-16 | Synchronise timestamp modulation and scrubbing min ttl information. | Christopher Pascoe |
| 2005-08-11 | Remove bogus debug printf(). | Ryan Thomas McBride |
| 2005-08-03 | Eliminate another case where pool routines are called without process context. | Christopher Pascoe |
| 2005-08-01 | Minor whitespace cleanup. | Christopher Pascoe |
| 2005-07-12 | default mtu to no more than ETHERMTU to avoid fragmentation; henning@ ok | Michael Shalayeff |
| 2005-05-28 | Add SA replay counter synchronization to pfsync(4). Required for IPsec | Hakan Olsson |
| 2005-05-21 | clean up and rework the interface absraction code big time, rip out multiple | Henning Brauer |
| 2005-02-20 | Avoid use after free when purging states. | Ryan Thomas McBride |
| 2005-02-15 | Fix scoping error which could cause some states with an empty ifname to be | Aaron Campbell |
| 2005-01-20 | sc->sc_sync_ifp = NULL if we fail to attach the multicast group. | Ryan Thomas McBride |
| 2005-01-20 | Use syncdev instead of syncif in ifconfig, and modify ioctl struct pfsyncreq | Ryan Thomas McBride |
| 2004-12-16 | Clean up handling of sync_flags. | Ryan Thomas McBride |
| 2004-12-13 | Set creation timestamps correctly on states learnt by pfsync that are | Christopher Pascoe |
| 2004-12-06 | At PFSYNC_ACT_CLR: | Marco Pfatschbacher |
| 2004-11-16 | Fix for PR3983 | Ryan Thomas McBride |
| 2004-09-17 | Clean up reference counting wrt state creation and destruction. Fixes | Ryan Thomas McBride |
| 2004-08-30 | Increment the states reference counter in the rule attached to the state | Ryan Thomas McBride |
| 2004-08-03 | Allow a unicast ip address to be specified for pfsync to send it's state | Ryan Thomas McBride |
| 2004-06-21 | First step towards more sane time handling in the kernel -- this changes | Thorsten Lockert |
| 2004-06-04 | Remove the multicast address when we unconfigure the syncif. | Ryan Thomas McBride |
