Age | Commit message (Expand) | Author |
2022-11-11 | rename pfsync_up() to pfsync_is_up() | David Gwynne |
2022-11-06 | move pfsync_state_import in if_pfsync.c to pf_state_import in pf.c | David Gwynne |
2021-07-07 | pfsync_undefer() must be called outside of PF_LOCK | Alexandr Nedvedicky |
2021-03-10 | spelling | Jonathan Gray |
2021-02-04 | make if_pfsync.c a better friend with PF_LOCK | Alexandr Nedvedicky |
2018-09-11 | - moving state look up outside of PF_LOCK() | Alexandr Nedvedicky |
2017-04-14 | Pass down the address family through the pr_input calls. This | Alexander Bluhm |
2017-02-20 | pfsync(4) percpu counters | Jeremie Courreges-Anglas |
2017-01-29 | Change the IPv4 pr_input function to the way IPv6 is implemented, | Alexander Bluhm |
2017-01-25 | Since raw_input() and route_input() are gone from pr_input, we can | Alexander Bluhm |
2017-01-20 | Stop using pfsockaddr_union outside of pf so that we can remove its usage | Claudio Jeker |
2015-01-24 | Userland (base & ports) was adapted to always include <netinet/in.h> | Theo de Raadt |
2013-10-24 | Move obvious kernel prototypes (and structure's with kernel pointers, | Theo de Raadt |
2012-06-29 | add ESN-related bits missed in the previous commit | Mike Belopuhov |
2012-06-29 | Add support for the Extended (64-bit) Sequence Number as defined | Mike Belopuhov |
2010-11-29 | get rid of struct pfsync_pkt. it was used to store data on the stack to | David Gwynne |
2010-07-09 | Add support for using IPsec in multiple rdomains. | Reyk Floeter |
2010-01-12 | factor m_pulldown out of the message handlers up into pfsync_input now | David Gwynne |
2010-01-10 | replace a pad in the pfsync subheader with a length field. it stores the | David Gwynne |
2009-11-09 | bump pfsync protocol version | David Gwynne |
2009-11-03 | rtables are stacked on rdomains (it is possible to have multiple routing | Claudio Jeker |
2009-06-14 | enable support for deferring the packet that creates a state so that your | David Gwynne |
2009-03-31 | do not include space in the end of the from for a hmac. after discussion | David Gwynne |
2009-02-16 | pfsync v5, mostly written at n2k9, but based on work done at n2k8. | David Gwynne |
2008-06-29 | Simplify state creation code; merge state import/export code between pfsync | Ryan Thomas McBride |
2008-06-17 | Crank PFSYNC_VERSION, lots has changed in struct pfsync_state due to the | Ryan Thomas McBride |
2008-05-29 | Second half of PF state table rearrangement. | Ryan Thomas McBride |
2007-12-14 | add sysctl entry points into various network layers, in particular to | Theo de Raadt |
2007-05-31 | First step of rearranging pf's state table internals... | Ryan Thomas McBride |
2006-10-31 | make pfsync a clonable too, but prevent more than one instance from | Henning Brauer |
2006-05-28 | Only preemptively increase the replay counter for outbound TDBs. | Ryan Thomas McBride |
2005-11-04 | crank pf_state and pf_src_node byte and packet counters to u_in64_t, since | Ryan Thomas McBride |
2005-10-27 | Basic support for attaching states from pfsync to the correct rules. | Ryan Thomas McBride |
2005-09-28 | Improve the safety of pf IOCTLs, taking into account that some paths can sleep. | Christopher Pascoe |
2005-08-16 | Only send the PFSS_TIMESTAMP timestamp bit across the wire, in case we | Christopher Pascoe |
2005-08-16 | Synchronise timestamp modulation and scrubbing min ttl information. | Christopher Pascoe |
2005-08-13 | Partial backout of previous revision, reinstates the ability to propagate | Christopher Pascoe |
2005-08-03 | Do not send "deletion" messages for states created by other pfsync peers when | Christopher Pascoe |
2005-08-03 | use flag macro instead of constant | Christopher Pascoe |
2005-05-28 | Add SA replay counter synchronization to pfsync(4). Required for IPsec | Hakan Olsson |
2005-01-20 | Use syncdev instead of syncif in ifconfig, and modify ioctl struct pfsyncreq | Ryan Thomas McBride |
2004-12-14 | move the ioctls w/ all the other ifaces; mcbride@ ok | Michael Shalayeff |
2004-11-16 | Fix for PR3983 | Ryan Thomas McBride |
2004-08-03 | Allow a unicast ip address to be specified for pfsync to send it's state | Ryan Thomas McBride |
2004-07-13 | spelling; dlg | Theo de Raadt |
2004-04-28 | pfsync stats fixups: | Ryan Thomas McBride |
2004-03-22 | Support for best effort bulk transfers of states when pfsync syncif is | Ryan Thomas McBride |
2004-02-20 | Make pfsync deal with clearing states bound to a group or interface (eg | Ryan Thomas McBride |
2004-02-10 | Make pfsync work correctly with IP options on 64-bit alignment | Ryan Thomas McBride |
2004-01-22 | - Include the value of pf_state.timeout in pfsync messages | Ryan Thomas McBride |