Age | Commit message (Expand) | Author |
2003-05-14 | 2 lines of code bring us tags on nat rules | Henning Brauer |
2003-05-13 | add support for tagging packets with arbitary tags and filtering based on | Henning Brauer |
2003-05-12 | - TCP window scaling is not applied to the SYNs' window so we must retract the | Mike Frantzen |
2003-05-12 | Reorder IPv6 address comparisons to check the least significant parts | Ryan Thomas McBride |
2003-05-12 | Adaptive timeout value scaling. Allows to reduce timeout values as the | Daniel Hartmeier |
2003-05-11 | the start of stateful TCP scrubbing. dynamically determine the highest TTL of | Mike Frantzen |
2003-05-11 | Use sizeof(struct icmp6_hdr) instead of ICMP_MINLEN for IPv6, both are | Daniel Hartmeier |
2003-05-10 | Pass ICMP error messages referring to non-TCP/UDP/ICMP packets statefully, | Daniel Hartmeier |
2003-05-10 | Support return-icmp for 'other' protocols (non-TCP/UDP/ICMP), for instance | Daniel Hartmeier |
2003-05-10 | Prepare pf_change_icmp() for parameter ip == NULL use. | Daniel Hartmeier |
2003-05-06 | Fix a bug that prevents rdr/binat (but not nat) from working for protocols | Daniel Hartmeier |
2003-04-30 | Allow tables to be loaded into anchors. | Cedric Berger |
2003-04-25 | Fix nat proxy port allocation. In case a range was manually specified, | Daniel Hartmeier |
2003-04-11 | set/update the queue IDs on filter rules (qid and pqid) on | Henning Brauer |
2003-04-09 | KNF | Henning Brauer |
2003-04-09 | Change pf_state structure to point to both a rule and the anchor, | Cedric Berger |
2003-04-05 | Stick pf_default_rule everytime a packet pass because of the | Cedric Berger |
2003-04-05 | Replace the timeout variables by the content of the timeout | Cedric Berger |
2003-04-05 | Cleanup by replacing a bunch of "(*rm)" by just "r" | Cedric Berger |
2003-04-03 | Back out my last change, which was incorrect or incomplete. | Cedric Berger |
2003-04-03 | Remove (state->rule.ptr != NULL) tests: this is always true now. | Cedric Berger |
2003-03-31 | Only delete rule structure when no state refer to it. | Cedric Berger |
2003-03-21 | - Add missing "\n" to some pf_table.c printf() | Cedric Berger |
2003-03-09 | tighten the TCP state code in relation to a FIN before any server responses | Mike Frantzen |
2003-03-04 | (really) support user/group rules with 'inet6' | Philipp Buehler |
2003-03-02 | Use priority queue for TCP ACKs that have no payload. Very useful on | Daniel Hartmeier |
2003-02-27 | make packet classification for altq work in the IPv6 case | Henning Brauer |
2003-02-27 | Repair IPv6 support for tables. | Cedric Berger |
2003-02-25 | - Handle src and dst comparisons correctly for binat so that it works | Ryan Thomas McBride |
2003-02-16 | KNF | Theo de Raadt |
2003-02-12 | Remove commons; inspired by netbsd. | Jason Wright |
2003-02-12 | Make r.rpool.proxy_port[] a consistent byte order to match cleanup in | Ryan Thomas McBride |
2003-02-12 | Fix a bunch of pf_route() bugs: | Ryan Thomas McBride |
2003-02-09 | Slightly less noisy debug printf from pf_map_addr(), ok mcbride@ | Daniel Hartmeier |
2003-02-05 | Remove the confusing and more-or-less unnecessary temporary | Ryan Thomas McBride |
2003-02-01 | Make it build without INET6 again. | Daniel Hartmeier |
2003-01-31 | The fix introduced with 1.294 to solve issues with route-to in | Daniel Hartmeier |
2003-01-31 | Check protocol (TCP/UDP/ICMP/ICMP6) checksums of all incoming packets, | Daniel Hartmeier |
2003-01-31 | Send a RST when an invalid packet matches a TCP state during the | Daniel Hartmeier |
2003-01-25 | Fix the behaviour of rdr rules which redirect to a range of ports; | Ryan Thomas McBride |
2003-01-24 | Sigh, pf_pull_hdr (aka pf_pull_hair) doesn't do an m_pullup, it merely | Daniel Hartmeier |
2003-01-24 | Move the mbuf pullup for TCP options to the beginning of TCP handling, | Daniel Hartmeier |
2003-01-24 | Fix wscale support, the first version didn't really work right. | Daniel Hartmeier |
2003-01-23 | Fix a bug where the kernel crashes when translating IPv6 ICMP packets. | Daniel Hartmeier |
2003-01-21 | Support for TCP window scaling (RFC 1323). ok frantzen@ | Daniel Hartmeier |
2003-01-19 | format string fixes | Henning Brauer |
2003-01-18 | Argh! KNF. | Ryan Thomas McBride |
2003-01-18 | Make nat behave the way it used to by copying back the random source port | Ryan Thomas McBride |
2003-01-09 | (whitespace) KNF, re-fold -w 80 | Daniel Hartmeier |
2003-01-09 | Add support for active/inactive tablesets in the kernel. | Cedric Berger |