| Age | Commit message (Expand) | Author |
|---|
| 2015-01-24 | Userland (base & ports) was adapted to always include <netinet/in.h> | Theo de Raadt |
| 2013-10-24 | Move obvious kernel prototypes (and structure's with kernel pointers, | Theo de Raadt |
| 2012-06-29 | add ESN-related bits missed in the previous commit | Mike Belopuhov |
| 2012-06-29 | Add support for the Extended (64-bit) Sequence Number as defined | Mike Belopuhov |
| 2010-11-29 | get rid of struct pfsync_pkt. it was used to store data on the stack to | David Gwynne |
| 2010-07-09 | Add support for using IPsec in multiple rdomains. | Reyk Floeter |
| 2010-01-12 | factor m_pulldown out of the message handlers up into pfsync_input now | David Gwynne |
| 2010-01-10 | replace a pad in the pfsync subheader with a length field. it stores the | David Gwynne |
| 2009-11-09 | bump pfsync protocol version | David Gwynne |
| 2009-11-03 | rtables are stacked on rdomains (it is possible to have multiple routing | Claudio Jeker |
| 2009-06-14 | enable support for deferring the packet that creates a state so that your | David Gwynne |
| 2009-03-31 | do not include space in the end of the from for a hmac. after discussion | David Gwynne |
| 2009-02-16 | pfsync v5, mostly written at n2k9, but based on work done at n2k8. | David Gwynne |
| 2008-06-29 | Simplify state creation code; merge state import/export code between pfsync | Ryan Thomas McBride |
| 2008-06-17 | Crank PFSYNC_VERSION, lots has changed in struct pfsync_state due to the | Ryan Thomas McBride |
| 2008-05-29 | Second half of PF state table rearrangement. | Ryan Thomas McBride |
| 2007-12-14 | add sysctl entry points into various network layers, in particular to | Theo de Raadt |
| 2007-05-31 | First step of rearranging pf's state table internals... | Ryan Thomas McBride |
| 2006-10-31 | make pfsync a clonable too, but prevent more than one instance from | Henning Brauer |
| 2006-05-28 | Only preemptively increase the replay counter for outbound TDBs. | Ryan Thomas McBride |
| 2005-11-04 | crank pf_state and pf_src_node byte and packet counters to u_in64_t, since | Ryan Thomas McBride |
| 2005-10-27 | Basic support for attaching states from pfsync to the correct rules. | Ryan Thomas McBride |
| 2005-09-28 | Improve the safety of pf IOCTLs, taking into account that some paths can sleep. | Christopher Pascoe |
| 2005-08-16 | Only send the PFSS_TIMESTAMP timestamp bit across the wire, in case we | Christopher Pascoe |
| 2005-08-16 | Synchronise timestamp modulation and scrubbing min ttl information. | Christopher Pascoe |
| 2005-08-13 | Partial backout of previous revision, reinstates the ability to propagate | Christopher Pascoe |
| 2005-08-03 | Do not send "deletion" messages for states created by other pfsync peers when | Christopher Pascoe |
| 2005-08-03 | use flag macro instead of constant | Christopher Pascoe |
| 2005-05-28 | Add SA replay counter synchronization to pfsync(4). Required for IPsec | Hakan Olsson |
| 2005-01-20 | Use syncdev instead of syncif in ifconfig, and modify ioctl struct pfsyncreq | Ryan Thomas McBride |
| 2004-12-14 | move the ioctls w/ all the other ifaces; mcbride@ ok | Michael Shalayeff |
| 2004-11-16 | Fix for PR3983 | Ryan Thomas McBride |
| 2004-08-03 | Allow a unicast ip address to be specified for pfsync to send it's state | Ryan Thomas McBride |
| 2004-07-13 | spelling; dlg | Theo de Raadt |
| 2004-04-28 | pfsync stats fixups: | Ryan Thomas McBride |
| 2004-03-22 | Support for best effort bulk transfers of states when pfsync syncif is | Ryan Thomas McBride |
| 2004-02-20 | Make pfsync deal with clearing states bound to a group or interface (eg | Ryan Thomas McBride |
| 2004-02-10 | Make pfsync work correctly with IP options on 64-bit alignment | Ryan Thomas McBride |
| 2004-01-22 | - Include the value of pf_state.timeout in pfsync messages | Ryan Thomas McBride |
| 2004-01-18 | Port is already stored in network byte order, no need to convert. | Ryan Thomas McBride |
| 2003-12-31 | Many improvements to the handling of interfaces in PF. | Cedric Berger |
| 2003-12-28 | Add a new PFSYNC_ACT_UREQ message type. | Ryan Thomas McBride |
| 2003-12-15 | sc_sp is a #define on some architectures, use a different name | Theo de Raadt |
| 2003-12-15 | Fix whitespace screwups before henning wakes up. | Ryan Thomas McBride |
| 2003-12-15 | Add initial support for pf state synchronization over the network. | Ryan Thomas McBride |
| 2003-11-08 | Add 'no-sync' state option to prevent state transition messages for states | Ryan Thomas McBride |
| 2002-12-11 | unpee | Michael Shalayeff |
| 2002-11-29 | expose state table changes | Michael Shalayeff |
