| Age | Commit message (Expand) | Author |
|---|
| 2008-06-10 | Simplify code slightly; use PR_ZERO with pool_get() rather than bzero(). | Ryan Thomas McBride |
| 2008-06-10 | save somespace in the state by collapsing two 8 bit ints used as booleans | Henning Brauer |
| 2008-06-10 | implement a sloppy tcpstate tracker which does not look at sequence | Henning Brauer |
| 2008-05-29 | Second half of PF state table rearrangement. | Ryan Thomas McBride |
| 2008-05-29 | rewrite the state table logic. | Henning Brauer |
| 2008-05-18 | KNF | Ryan Thomas McBride |
| 2008-05-06 | Add a counter to record how many states have been created by a rule. | Marco Pfatschbacher |
| 2008-01-12 | Kill all timeouts and undo carp demotion on pfsync_clone_destroy. | Marco Pfatschbacher |
| 2007-12-14 | add sysctl entry points into various network layers, in particular to | Theo de Raadt |
| 2007-09-18 | allow 4095 instead of 20 multicast group memberships per socket (you need | Markus Friedl |
| 2007-09-15 | malloc sweep: | Henning Brauer |
| 2007-09-03 | Make use of the pfsync 'badval' and 'stale' counters instead of using | Joel Knight |
| 2007-09-01 | since the | Henning Brauer |
| 2007-06-26 | Fix a race condition during ruleset reload; make sure we don't walk off | Ryan Thomas McBride |
| 2007-06-25 | pretty mechanical change: now that the state tables use seperate state | Henning Brauer |
| 2007-06-24 | Save some bytes and make code more readable by removing junk union and | Ryan Thomas McBride |
| 2007-06-21 | reimplement interface bound states in a non-retarded way. | Henning Brauer |
| 2007-06-14 | sprinkle some #ifdef IPSEC so that pfsync compiles w/o ipsec | Henning Brauer |
| 2007-06-01 | factor out duplicated code to allocate state key and cross-reference it | Henning Brauer |
| 2007-05-31 | unlink the right state, ryan ok | Henning Brauer |
| 2007-05-31 | Move the state id and creatorid (used mainly by pfsync) into struct pf_state. | Ryan Thomas McBride |
| 2007-05-31 | First step of rearranging pf's state table internals... | Ryan Thomas McBride |
| 2007-05-26 | one extern seems to be better than 20 for ifqmaxlen; ok krw | Jason Wright |
| 2006-11-16 | no need to always attach pfsync0 any more. ok mpf mcbride | Henning Brauer |
| 2006-11-01 | Attach pfsync0 and pflog0 by default like they used to, /etc/rc depends on | Ryan Thomas McBride |
| 2006-11-01 | remove redundant null check, ok ryan | Henning Brauer |
| 2006-10-31 | slightly improve consustency and readability, no functional change | Henning Brauer |
| 2006-10-31 | in pfsync_update_tdb, when there is no pfsync interface, we must return | Henning Brauer |
| 2006-10-31 | hard to believe people still manage to commit non-compiling code once in a while | Theo de Raadt |
| 2006-10-31 | make pfsync a clonable too, but prevent more than one instance from | Henning Brauer |
| 2006-06-02 | Introduce attributes to interface groups. | Marco Pfatschbacher |
| 2006-05-28 | Only preemptively increase the replay counter for outbound TDBs. | Ryan Thomas McBride |
| 2006-05-13 | Avoid potential hash collisions and increase efficiency by doing an exact | Ryan Thomas McBride |
| 2006-05-06 | The SPI in a TDB is actually stored in network order. Make sa synchronisation | Ryan Thomas McBride |
| 2006-03-25 | allow bpf(4) to ignore packets based on their direction (inbound or | Damien Miller |
| 2006-03-04 | With the exception of two other small uncommited diffs this moves | Brad Smith |
| 2006-02-20 | Fix kernel builds without bpfilter. Linking is still broken. | Damien Bergamini |
| 2005-11-04 | crank pf_state and pf_src_node byte and packet counters to u_in64_t, since | Ryan Thomas McBride |
| 2005-11-01 | Always sure that we have memory for the 'dst' scrub information, which may | Christopher Pascoe |
| 2005-10-28 | s/rmatch/chksum_flag/ to clarify what's going on. Pointed out by dhartmei@ | Ryan Thomas McBride |
| 2005-10-27 | Basic support for attaching states from pfsync to the correct rules. | Ryan Thomas McBride |
| 2005-09-28 | Improve the safety of pf IOCTLs, taking into account that some paths can sleep. | Christopher Pascoe |
| 2005-08-18 | Rearrange pf_state and pfi_kif so that the parts of the structure needed | Christopher Pascoe |
| 2005-08-16 | Synchronise timestamp modulation and scrubbing min ttl information. | Christopher Pascoe |
| 2005-08-11 | Remove bogus debug printf(). | Ryan Thomas McBride |
| 2005-08-03 | Eliminate another case where pool routines are called without process context. | Christopher Pascoe |
| 2005-08-01 | Minor whitespace cleanup. | Christopher Pascoe |
| 2005-07-12 | default mtu to no more than ETHERMTU to avoid fragmentation; henning@ ok | Michael Shalayeff |
| 2005-05-28 | Add SA replay counter synchronization to pfsync(4). Required for IPsec | Hakan Olsson |
| 2005-05-21 | clean up and rework the interface absraction code big time, rip out multiple | Henning Brauer |
