| Age | Commit message (Expand) | Author |
|---|
| 2002-12-27 | Fixups for pf_route and pf_route6. | Ryan Thomas McBride |
| 2002-12-27 | Handle binat-anchor rules in pf_match_translation(), they don't have a | Daniel Hartmeier |
| 2002-12-27 | Initialize rt_ifp in newly allocated pf_state objects to NULL. | Daniel Hartmeier |
| 2002-12-26 | Prettier debug printing in pf_map_addr. | Ryan Thomas McBride |
| 2002-12-26 | Additional sanity checks for pf_route(). Please report when any of these | Daniel Hartmeier |
| 2002-12-23 | Change from array to single pf_pabuf (no longer need multiple buffers as | Ryan Thomas McBride |
| 2002-12-22 | Handle rdr rules with unspecified proxy ports correctly. Also don't | Ryan Thomas McBride |
| 2002-12-19 | Replace skip step calculation so it scales O(n) instead of O(n*n). | Daniel Hartmeier |
| 2002-12-19 | fix 'no nat/rdr/binat' evaluation. from mcbride@, slightly modified :) | Daniel Hartmeier |
| 2002-12-19 | Initialize pf_state.nat_rule to NULL if there's no translation used. | Daniel Hartmeier |
| 2002-12-18 | Store translation rule pointer in state entries, so pfctl -vsn can print | Daniel Hartmeier |
| 2002-12-18 | When logging packets matched by rules within anchors, use the anchor rule | Daniel Hartmeier |
| 2002-12-18 | big KNF round | Henning Brauer |
| 2002-12-18 | Pass skip step values through ioctl interface, pfctl -vvsr shows them, | Daniel Hartmeier |
| 2002-12-18 | KNF | Henning Brauer |
| 2002-12-18 | Match the rule protocol against the actual protocol of the packet, not just | Ryan Thomas McBride |
| 2002-12-17 | Merge pf_nat/pf_binat/pf_rdr structs into pf_rule. Simplifies code, allows | Ryan Thomas McBride |
| 2002-12-13 | add pqueue and pqid to pf_rule. | Henning Brauer |
| 2002-12-06 | Introduce anchors and named rule sets, allowing to load additional rule | Daniel Hartmeier |
| 2002-12-03 | no need to mh_align (while it's wrong), cleaner mtu setting; dhartmei@ ok | Michael Shalayeff |
| 2002-12-01 | - Clean up pf_ioctl mainly by adding new functions to handle cleaning and | Ryan Thomas McBride |
| 2002-12-01 | pfsync currently causes kernel faults, so we don't want to call these functions | Ryan Thomas McBride |
| 2002-11-29 | expose state table changes | Michael Shalayeff |
| 2002-11-28 | - MD5 too slow, replace with pf_hash (based on hash from if_bridge.c) | Ryan Thomas McBride |
| 2002-11-24 | move } outside #ifdef INET6 | Ryan Thomas McBride |
| 2002-11-23 | KNF | Theo de Raadt |
| 2002-11-23 | pass a pointer to the hash, not the first chunk of it | Ryan Thomas McBride |
| 2002-11-23 | kernel code to allow multiple redirection addresses to be specified for nat | Ryan Thomas McBride |
| 2002-11-22 | on block rules, let queue apply to the RST packets in the return-rst case | Henning Brauer |
| 2002-10-29 | keep all pflog goodies in pflog sources, avoids code duplications; okski fran... | Michael Shalayeff |
| 2002-10-22 | Convert "int af" and "u_int8_t af" declarations and function arguments | Ryan Thomas McBride |
| 2002-10-20 | Move pf_compare_(rules|nats|binats|rdrs) to pf_ioctl.c. Simplifies and | Ryan Thomas McBride |
| 2002-10-14 | Allow one to specify a netblock in a binat rule: | Henning Brauer |
| 2002-10-08 | the first step of pf/altq merge. | Kenjiro Cho |
| 2002-10-07 | -Wsign-compare clean | Daniel Hartmeier |
| 2002-10-07 | set block-policy [drop|return] | Henning Brauer |
| 2002-10-07 | support a generic return | Henning Brauer |
| 2002-10-07 | make return-icmp work for rules covering both v4 and v6 | Henning Brauer |
| 2002-10-07 | use a new rule_flag PFRULE_RETURNICMP to decide wether to return-icmp or not | Henning Brauer |
| 2002-10-07 | Add 'reply-to' to filter rules, similar to route-to, but applying to | Daniel Hartmeier |
| 2002-10-05 | Allow filtering based on IP header's tos field. | Daniel Hartmeier |
| 2002-10-04 | [to the right branch this time] | Jason Ish |
| 2002-09-27 | daddr was used where saddr was meant while checking incoming packets for | Henning Brauer |
| 2002-09-11 | KNF - return is not a function. | Jun-ichiro itojun Hagino |
| 2002-08-28 | Fix a problem where passing NULL as a pointer with varargs does not promote | Per Fogelstrom |
| 2002-08-12 | Use state tree instead of separate (flat) list to find NAT proxy ports, | Daniel Hartmeier |
| 2002-08-08 | th_flags doesn't have to be equal to TH_SYN to generate modulator, it's | Daniel Hartmeier |
| 2002-07-24 | Use host order when adding packet size to interface statistics counter. | Daniel Hartmeier |
| 2002-07-15 | add u_int8_t ifnot to struct pf_rule to support matching packets on any | Henning Brauer |
| 2002-07-15 | remove duplicated interface check in test_icmp | Henning Brauer |
