| Age | Commit message (Expand) | Author |
|---|
| 2009-01-30 | sync the part copied from ip_output: always initialize IP checksum | Christian Weisgerber |
| 2009-01-30 | sprinkle splassert(IPL_SOFTNET) around the code that inserts, unlinks, and | David Gwynne |
| 2009-01-29 | Split the address selection from pools away from pf.c and put it in | Pierre-Yves Ritschard |
| 2009-01-27 | If a packet translation was a NOP, undo separate NAT key and | Marco Pfatschbacher |
| 2009-01-16 | In pf_test_rule(), if we don't create a state, free any state keys that | David Krause |
| 2008-11-24 | Fix splasserts seen in pr 5987 by propagating a flag that discribes | Mike Belopuhov |
| 2008-11-21 | Change rn_mpath_next() to be able to walk over the full multipath list | Claudio Jeker |
| 2008-10-28 | Always skip "urpf-failed" test for IPv6 link local addresses. | Marco Pfatschbacher |
| 2008-10-23 | use the correct idiom for NFOO things which come from "foo.h" files | Theo de Raadt |
| 2008-10-02 | When redirect is used with sticky-address and a matching pass rule uses | Joel Sing |
| 2008-09-28 | Teach PF pf_print_state_parts() about IPv4 in IP and IPv6 in IP | Joel Sing |
| 2008-09-17 | remove dead stores and newly created unused variables. | Charles Longeau |
| 2008-09-10 | re-enable the state key linking. i believe the bugs that hit us shortly | Henning Brauer |
| 2008-09-09 | welcome pflow(4), a netflow v5 compatible flow export interface. | Henning Brauer |
| 2008-09-03 | before linking state keys compare them to verify they actually are the | Henning Brauer |
| 2008-09-02 | remove dead stores and newly created unused variables. | Charles Longeau |
| 2008-08-26 | introduce a function to be called when addressing information has changed, | Henning Brauer |
| 2008-08-22 | Make pf_print_host() print IPv6 addresses correctly. | Alexander Bluhm |
| 2008-08-02 | do not write the pf state key pointer to the pkhdr. | Henning Brauer |
| 2008-07-22 | after pf_state_key_atach nothing must use the state keys passed to it any | Henning Brauer |
| 2008-07-21 | some whitespace cleanup I did while looking through the code | David Krause |
| 2008-07-21 | fix typo that broke rdr rules (without pass) with non-TCP/UDP/ICMP protocols | David Krause |
| 2008-07-14 | m_copy can return NULL, so check for it | Henning Brauer |
| 2008-07-10 | check pf NAT source port allocation against net.inet.(tcp|udp).baddynamic | Damien Miller |
| 2008-07-10 | In pf_state_insert(), if the first pf_state_key_attach() fails, the | David Krause |
| 2008-07-05 | in pf_state_key_attach(), when there is already an existing state key that | David Krause |
| 2008-07-04 | in pf_state_key_attach(), when we find that there already is a state key | Henning Brauer |
| 2008-07-04 | remove prototype for nonexistant function | Henning Brauer |
| 2008-07-03 | link pf state keys to tcp pcbs and vice versa. | Henning Brauer |
| 2008-07-01 | Don't return immediately if we're actually passing the traffic, we want to | Ryan Thomas McBride |
| 2008-07-01 | PF_DT_SKIP_STATETREE is no longer used. | Ryan Thomas McBride |
| 2008-06-29 | Simplify state creation code; merge state import/export code between pfsync | Ryan Thomas McBride |
| 2008-06-26 | Fix sticky-address on rdr; With the current nat code, we always use the same | Ryan Thomas McBride |
| 2008-06-21 | Only do state key linking on the outbound path. | Ryan Thomas McBride |
| 2008-06-16 | when freeing a state key sk1, look wether it is linked to another state key | Henning Brauer |
| 2008-06-12 | fix synproxy. | Henning Brauer |
| 2008-06-11 | when we establish the mapping from a state key, do it both ways, aka | Henning Brauer |
| 2008-06-11 | factor out state creation code for readability; make it static inline | Henning Brauer |
| 2008-06-11 | superfluous to check for m != NULL in pf_find_state, it is plain | Henning Brauer |
| 2008-06-11 | after finding a state in the outbound path clear the statekey pointer | Henning Brauer |
| 2008-06-11 | extra paranoia: | Henning Brauer |
| 2008-06-11 | yuck, fix a last minute collision | Henning Brauer |
| 2008-06-11 | store a pointer to the stack side state key in the mbuf packet | Henning Brauer |
| 2008-06-10 | Handle the closing of half connections where we don't see the full | Reyk Floeter |
| 2008-06-10 | Simplify code slightly; use PR_ZERO with pool_get() rather than bzero(). | Ryan Thomas McBride |
| 2008-06-10 | Handle a special sloppy case where we only see one half of the | Reyk Floeter |
| 2008-06-10 | remove a debug check& printf that should not have gone in in the first | Henning Brauer |
| 2008-06-10 | save somespace in the state by collapsing two 8 bit ints used as booleans | Henning Brauer |
| 2008-06-10 | in pf_test_state_icmp when trying tomatch icmp errors to tcp sessions | Henning Brauer |
| 2008-06-10 | implement a sloppy tcpstate tracker which does not look at sequence | Henning Brauer |
