| Age | Commit message (Expand) | Author |
|---|
| 2011-03-07 | Declare the inline function pf_addr_compare() non-static in pfvar.h | Alexander Bluhm |
| 2011-03-05 | The function pf_tag_packet() never fails. Remove a redundant check | Alexander Bluhm |
| 2011-02-23 | fixup source address rewriting for the icmp errors with the rdr-to setup. | Mike Belopuhov |
| 2011-02-14 | Add missing byte-order swap to pf_match_addr_range. Without this, rules | Stuart Henderson |
| 2011-02-06 | pf_translate() may be called from pflog_packet(). Make sure that | Alexander Bluhm |
| 2011-02-06 | pf_test() and pf_test6() drop IPv4-ICMP6 and IPv6-ICMP packets. Do | Alexander Bluhm |
| 2011-02-05 | When a packet with an unusual protocol number got rewritten, the | Alexander Bluhm |
| 2011-01-22 | Pf must not scrub packets which will be dropped anyway. | Alexander Bluhm |
| 2011-01-19 | Give pf_normalize_ip() the same 3 way semantics as pf_test(). | Alexander Bluhm |
| 2011-01-11 | Perform IP options check in pf_test_rule(), before creating state. | Ryan Thomas McBride |
| 2011-01-10 | If pf_test() was called recursively, the global variable pf_hdrs | Alexander Bluhm |
| 2011-01-10 | DPFPRINTF already adds the "pf: ", no need to put it in the error | Ryan Thomas McBride |
| 2011-01-05 | Remove mbuf ptr save dance in pf_test6(). It was a leftover with | Alexander Bluhm |
| 2010-12-31 | Address comparisson is implemented twice in pf.c. Put this into a | Alexander Bluhm |
| 2010-12-24 | in pf_src_connlimit, the indices to sk->addr were swapped. | Henning Brauer |
| 2010-12-07 | remove a bunch of unused arguments | Jonathan Gray |
| 2010-09-24 | itojun picked exactly the right reason in that REASON_SET call. really no | Henning Brauer |
| 2010-09-24 | use pd->rdomain for the PF_MISMATCHAW checks in pf_test_fragment instead of | Henning Brauer |
| 2010-09-24 | no need to pf_tag_packet in the stateless case in pf_test since | Henning Brauer |
| 2010-09-24 | hello, this is captain obvious speaking: | Henning Brauer |
| 2010-09-24 | remove misleading XXX comment. it is pretty clear by now that | Henning Brauer |
| 2010-09-24 | nicer linewraps, purely cosmetic | Henning Brauer |
| 2010-09-24 | kill some unused arguments to pf_create_state | Jonathan Gray |
| 2010-09-23 | Break out rule counter update code into a separate function, makes the | Ryan Thomas McBride |
| 2010-09-22 | add a new log opt PF_LOG_MATCHES | Henning Brauer |
| 2010-09-22 | various whitespace fixes that my hands did while i was looking for sth | Henning Brauer |
| 2010-09-21 | assert copyrights / bump years | Henning Brauer |
| 2010-09-21 | after ruleset eval is done, we must apply actions from the last matching | Henning Brauer |
| 2010-09-21 | do not increment states_tot on match rules. it is purely cosmetic, this | Henning Brauer |
| 2010-09-21 | make "match log" rules log on the fly. thus you can log and see the packet | Henning Brauer |
| 2010-09-21 | remove now obsolete XXX comment | Henning Brauer |
| 2010-09-21 | make pf_translate (void so far) return 1 if it actually changed something | Henning Brauer |
| 2010-09-21 | factor our the code to set up pf_pdesc, a central structure in pf carrying | Henning Brauer |
| 2010-08-05 | In pf_icmp_mapping() the ICMP and ICMPv6 types shared the same | Alexander Bluhm |
| 2010-07-02 | m_copyback can fail to allocate memory, but is a void fucntion so gymnastics | Bret Lambert |
| 2010-07-01 | g/c unused param to pf_translate | Henning Brauer |
| 2010-06-27 | fix a comment and add a new one to make clear what the mbuf ptr save dance | Henning Brauer |
| 2010-06-27 | stuff nsaddr/ndaddr/nsport/ndport (addrs/ports after NAT, used a lot while | Henning Brauer |
| 2010-05-07 | Start cleaning up the mess called rtalloc*. Kill rtalloc2, make rtalloc1 | Claudio Jeker |
| 2010-02-04 | pf_get_sport() picks a random port from the port range specified in a | Stuart Henderson |
| 2010-01-18 | Convert pf debug logging to using log()/addlog(), a single standardised | Ryan Thomas McBride |
| 2010-01-14 | henning and I are both dumbasses, testing &foo against NULL is pointless. | Ryan Thomas McBride |
| 2010-01-14 | When printing states in debug output, print the rule number that created | Ryan Thomas McBride |
| 2010-01-14 | i forgot to remove a now obsolete comment in pf_create_state about | Henning Brauer |
| 2010-01-14 | in pf_create_state, when we fixed the leaks, we were a bit too trigger | Henning Brauer |
| 2010-01-13 | in pf_state_key_detach, ensure that the state key pointer on the state | Henning Brauer |
| 2010-01-12 | First pass at removing the 'pf_pool' mechanism for translation and routing | Ryan Thomas McBride |
| 2010-01-11 | "final" leak in state creation: in pf_state_key_setup, if we actually | Henning Brauer |
| 2010-01-11 | fix a bug in pf_create_state that was a major source of amusement for me | Henning Brauer |
| 2009-12-24 | add support to pf for filtering a packet by the interface it was received | David Gwynne |
