| Age | Commit message (Expand) | Author |
|---|
| 2002-05-05 | Instead of returning a useless kernel space pointer for the rule that | Daniel Hartmeier |
| 2002-04-24 | Add dynamic (in-kernel) interface name -> address translation. Instead of | Daniel Hartmeier |
| 2002-04-23 | Allow explicit filtering of fragments when they are not reassembled. | Daniel Hartmeier |
| 2002-04-20 | All calls to pool_get(9) should use PR_xx flags, not M_xx. | Federico G. Schwindt |
| 2002-04-08 | Credit DARPA/USAF appropriately. | Jason Wright |
| 2002-03-31 | Use ip_defttl as ttl for return-rst instead of an arbitrary hardcoded | Daniel Hartmeier |
| 2002-03-30 | Initialize sequence number high limit from 1 to the real value with the | Daniel Hartmeier |
| 2002-03-27 | implement a "no-route" keyword. | Michael Shalayeff |
| 2002-03-26 | Change default logging level from none to urgent. Should never print | Daniel Hartmeier |
| 2002-03-25 | Ignore 'keep state' for ICMP errors whose inner headers mismatch state | Daniel Hartmeier |
| 2002-03-25 | add ioctl DIOCKILLSTATES to shootdown a subset of the state table. allows | Mike Frantzen |
| 2002-03-08 | Fix arc4random() usage; add more randomness to pf_get_sport(). | Mike Pechkin |
| 2002-02-26 | Add optional pool memory hard limits, mainly as temporary solution | Daniel Hartmeier |
| 2002-02-23 | Pools that are only used in the ioctls can use the nointr allocator. | Artur Grabowski |
| 2002-02-17 | Calculate IP checksum and copyback modified headers before logging a | Daniel Hartmeier |
| 2002-02-15 | pf only uses seconds for time measuring. There is no need to call microtime | Artur Grabowski |
| 2002-02-14 | KNF | Theo de Raadt |
| 2002-02-14 | Add skip steps for rule action (pass/block vs. scrub) and direction | Daniel Hartmeier |
| 2002-02-11 | Remove unused function prototype, from Jason Ish | Daniel Hartmeier |
| 2002-02-11 | Remove ancient comment regarding memcmp(), from Jason Ish | Daniel Hartmeier |
| 2002-01-23 | Pool deals fairly well with physical memory shortage, but it doesn't deal | Artur Grabowski |
| 2002-01-12 | - Only apply fastroute and route-to if we are going in the same | jasoni |
| 2002-01-09 | Add labels to rules. These are arbitrary names (not to be confused with | Daniel Hartmeier |
| 2002-01-08 | Add "no nat/rdr/binat" to nat.conf. The first matching rule applies. | Daniel Hartmeier |
| 2001-12-31 | only require write mode for modifying ioctls; dhartmei@, frantzen@, deraadt@ ok | Michael Shalayeff |
| 2001-12-18 | Update rt_ifp in DIOCCHANGERULE. | jasoni |
| 2001-12-11 | - Log packet while mbuf is still valid. | jasoni |
| 2001-12-10 | Add an ioctl to add state entries (DIOCADDSTATE) for proxies. | Daniel Hartmeier |
| 2001-12-10 | Add stateful filtering for other (non-TCP/UDP/ICMP) protocol, based on | Daniel Hartmeier |
| 2001-12-03 | Don't reset pf_status.debug and .since on DIOCCLRSTATUS. | Daniel Hartmeier |
| 2001-12-01 | 217 lines of diff for KNF, dhartmei, you are evil | Theo de Raadt |
| 2001-11-30 | only make a copy of the mbuf if the route rule is dup-to | jasoni |
| 2001-11-27 | typo - use correct mbuf | jasoni |
| 2001-11-27 | do pf_route() before logging in case the logging created a bogus rule | Mike Frantzen |
| 2001-11-26 | add fastroute options similar to what is found in ipf | jasoni |
| 2001-11-21 | Use pf_pull_hdr() instead of manual mbuf traversal. Fixes potential crashes | Daniel Hartmeier |
| 2001-11-20 | don't allow CHANGEBINAT ioctl in securelevel > 1 | Mike Pechkin |
| 2001-11-16 | yes, signed substraction does not work because of underflows, revert the prev... | Michael Shalayeff |
| 2001-11-14 | use substract when comparing keys, for ip addrs as well. | Michael Shalayeff |
| 2001-11-13 | fix pf from going off into the weeds on an ipv6 icmp packet with certain option | Mike Frantzen |
| 2001-11-06 | Use #defines for skip step values. From dgregor@net.ohio-state.edu. | Daniel Hartmeier |
| 2001-10-24 | Reset states counter when clearing states. | Daniel Hartmeier |
| 2001-10-15 | Add 'allow-opts' to rules. Packets with IP options will be blocked by | Daniel Hartmeier |
| 2001-10-13 | Patch from Ryan McBride, fixes IPv6 return-rst problem, found by | Daniel Hartmeier |
| 2001-10-02 | Convert ip_off of the inner IP header to host order in pf_test_state_icmp(). | Daniel Hartmeier |
| 2001-09-30 | Tune TCP fsm (99.7% - 99.9% accuracy over 1e6 connections) | Mike Frantzen |
| 2001-09-27 | The skip steps array was one element short (since adding steps for af). | Daniel Hartmeier |
| 2001-09-27 | switch without break. This caused the 'ICMP too short' messages, since | Daniel Hartmeier |
| 2001-09-27 | Fix th_ack calculation in pf_send_reset(). return-rst didn't work since | Daniel Hartmeier |
| 2001-09-23 | Bump up the tcp half closed timeout (single FIN) to an hour | Mike Frantzen |
