Age | Commit message (Expand) | Author |
2003-01-25 | Fix the behaviour of rdr rules which redirect to a range of ports; | Ryan Thomas McBride |
2003-01-24 | Sigh, pf_pull_hdr (aka pf_pull_hair) doesn't do an m_pullup, it merely | Daniel Hartmeier |
2003-01-24 | Move the mbuf pullup for TCP options to the beginning of TCP handling, | Daniel Hartmeier |
2003-01-24 | Fix wscale support, the first version didn't really work right. | Daniel Hartmeier |
2003-01-23 | Fix a bug where the kernel crashes when translating IPv6 ICMP packets. | Daniel Hartmeier |
2003-01-21 | Support for TCP window scaling (RFC 1323). ok frantzen@ | Daniel Hartmeier |
2003-01-19 | format string fixes | Henning Brauer |
2003-01-18 | Argh! KNF. | Ryan Thomas McBride |
2003-01-18 | Make nat behave the way it used to by copying back the random source port | Ryan Thomas McBride |
2003-01-09 | (whitespace) KNF, re-fold -w 80 | Daniel Hartmeier |
2003-01-09 | Add support for active/inactive tablesets in the kernel. | Cedric Berger |
2003-01-07 | Remove table name hashing (pass the name in each ioctl instead), and | Daniel Hartmeier |
2003-01-06 | knf | Theo de Raadt |
2003-01-05 | Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for table | Daniel Hartmeier |
2003-01-04 | move noroute from flag in pf_rule_addr into type in pf_addr_wrap. | Daniel Hartmeier |
2003-01-04 | Honour noroute in skip step calculation, found by cedric@ | Daniel Hartmeier |
2003-01-03 | KNF | Theo de Raadt |
2003-01-02 | When route-to/reply-to is used in combination with address translation, | Daniel Hartmeier |
2003-01-01 | use a #define for the default state table size | Henning Brauer |
2003-01-01 | Remove skip step for action (scrub vs. non-scrub), as scrub rules are | Daniel Hartmeier |
2003-01-01 | Fix breakage from PF_RULESET_MAX increase, regress tests match again. | Daniel Hartmeier |
2002-12-31 | Split scrub rules out from the filter rules in the kernel. | Ryan Thomas McBride |
2002-12-31 | Use a default state table limit of 10000 entries. This is safe for all | Daniel Hartmeier |
2002-12-29 | Add support for radix tables for source and destination of PF rules. | Cedric Berger |
2002-12-27 | Fixups for pf_route and pf_route6. | Ryan Thomas McBride |
2002-12-27 | Handle binat-anchor rules in pf_match_translation(), they don't have a | Daniel Hartmeier |
2002-12-27 | Initialize rt_ifp in newly allocated pf_state objects to NULL. | Daniel Hartmeier |
2002-12-26 | Prettier debug printing in pf_map_addr. | Ryan Thomas McBride |
2002-12-26 | Additional sanity checks for pf_route(). Please report when any of these | Daniel Hartmeier |
2002-12-23 | Change from array to single pf_pabuf (no longer need multiple buffers as | Ryan Thomas McBride |
2002-12-22 | Handle rdr rules with unspecified proxy ports correctly. Also don't | Ryan Thomas McBride |
2002-12-19 | Replace skip step calculation so it scales O(n) instead of O(n*n). | Daniel Hartmeier |
2002-12-19 | fix 'no nat/rdr/binat' evaluation. from mcbride@, slightly modified :) | Daniel Hartmeier |
2002-12-19 | Initialize pf_state.nat_rule to NULL if there's no translation used. | Daniel Hartmeier |
2002-12-18 | Store translation rule pointer in state entries, so pfctl -vsn can print | Daniel Hartmeier |
2002-12-18 | When logging packets matched by rules within anchors, use the anchor rule | Daniel Hartmeier |
2002-12-18 | big KNF round | Henning Brauer |
2002-12-18 | Pass skip step values through ioctl interface, pfctl -vvsr shows them, | Daniel Hartmeier |
2002-12-18 | KNF | Henning Brauer |
2002-12-18 | Match the rule protocol against the actual protocol of the packet, not just | Ryan Thomas McBride |
2002-12-17 | Merge pf_nat/pf_binat/pf_rdr structs into pf_rule. Simplifies code, allows | Ryan Thomas McBride |
2002-12-13 | add pqueue and pqid to pf_rule. | Henning Brauer |
2002-12-06 | Introduce anchors and named rule sets, allowing to load additional rule | Daniel Hartmeier |
2002-12-03 | no need to mh_align (while it's wrong), cleaner mtu setting; dhartmei@ ok | Michael Shalayeff |
2002-12-01 | - Clean up pf_ioctl mainly by adding new functions to handle cleaning and | Ryan Thomas McBride |
2002-12-01 | pfsync currently causes kernel faults, so we don't want to call these functions | Ryan Thomas McBride |
2002-11-29 | expose state table changes | Michael Shalayeff |
2002-11-28 | - MD5 too slow, replace with pf_hash (based on hash from if_bridge.c) | Ryan Thomas McBride |
2002-11-24 | move } outside #ifdef INET6 | Ryan Thomas McBride |
2002-11-23 | KNF | Theo de Raadt |