| Age | Commit message (Expand) | Author |
|---|
| 2002-06-14 | spelling; from Brian Poole <raj@cerias.purdue.edu> | Todd T. Fries |
| 2002-06-11 | enumerate UDP and OTHER state levels (similar to tcp_fsm.h) | Mike Frantzen |
| 2002-06-11 | Make NAT proxy port range configurable per rule, for instance privileged | Daniel Hartmeier |
| 2002-06-11 | Don't panic when pf_insert_state() detects an attempt to insert a | Daniel Hartmeier |
| 2002-06-11 | KNF return x -> return (x), ok frantzen@ | Daniel Hartmeier |
| 2002-06-10 | Allow ports to be specified in nat rules, useful later on for individual | Daniel Hartmeier |
| 2002-06-10 | Don't #include <sys/malloc.h> | Daniel Hartmeier |
| 2002-06-09 | Make pf_nat.saddr/daddr a pf_rule_addr instead of pf_addr_wrap, so it | Daniel Hartmeier |
| 2002-06-09 | reapply patch from jasoni@ for ICMP6_PACKET_TOO_BIG | Philipp Buehler |
| 2002-06-09 | reapply patch from jasoni@ for pf_route[6] | Philipp Buehler |
| 2002-06-09 | split ioctl functions out of pf.c into pf_ioctl.c | Philipp Buehler |
| 2002-06-09 | uncommit, broken (by corrupt diff) | Philipp Buehler |
| 2002-06-09 | new file sys/net/pf_ioctl.c | Philipp Buehler |
| 2002-06-09 | increment ifs6_in_toobig if ipv6 packet too large for interface in | jasoni |
| 2002-06-09 | in pf_route{6}, if too large for outgoing interface and not allowed to | jasoni |
| 2002-06-08 | Make state timeouts configurable per rule, like | Daniel Hartmeier |
| 2002-06-07 | add the possibility to configure a TTL while return-rst | Philipp Buehler |
| 2002-06-07 | in pf_route{6}, do not pass thru pf_test again if the outgoing | jasoni |
| 2002-06-07 | Add "(max <number>)" option for "keep/modulate state" to limit the number | Daniel Hartmeier |
| 2002-06-07 | switch from AVL tree's to herr Provos' red-black trees | Mike Frantzen |
| 2002-06-07 | Call pf_test() from pf_route() to filter (and translate) routed packets, | Daniel Hartmeier |
| 2002-06-07 | sync behaviour about DF bit between ip_output()/tcp_response() | Philipp Buehler |
| 2002-06-01 | ECN flag support for pf. Committed in consultation with Daniel. | Hugh Graham |
| 2002-05-31 | respect rmx_mtu (cached PMTUD result) on outbound. deraadt/angelos ok | Jun-ichiro itojun Hagino |
| 2002-05-31 | KNF | Theo de Raadt |
| 2002-05-28 | remove duplicated fragmentation code in favour of ip_fragment().. | jasoni |
| 2002-05-19 | KNF again | Theo de Raadt |
| 2002-05-12 | correct AH header chasing. ok dhartmei@openbsd | Jun-ichiro itojun Hagino |
| 2002-05-12 | Add gid based filtering, reduce to one (effective) uid, rename parser | Daniel Hartmeier |
| 2002-05-09 | Introduce user based filtering. Rules can specify ruid and euid (real and | Daniel Hartmeier |
| 2002-05-05 | Instead of returning a useless kernel space pointer for the rule that | Daniel Hartmeier |
| 2002-04-24 | Add dynamic (in-kernel) interface name -> address translation. Instead of | Daniel Hartmeier |
| 2002-04-23 | Allow explicit filtering of fragments when they are not reassembled. | Daniel Hartmeier |
| 2002-04-20 | All calls to pool_get(9) should use PR_xx flags, not M_xx. | Federico G. Schwindt |
| 2002-04-08 | Credit DARPA/USAF appropriately. | Jason Wright |
| 2002-03-31 | Use ip_defttl as ttl for return-rst instead of an arbitrary hardcoded | Daniel Hartmeier |
| 2002-03-30 | Initialize sequence number high limit from 1 to the real value with the | Daniel Hartmeier |
| 2002-03-27 | implement a "no-route" keyword. | Michael Shalayeff |
| 2002-03-26 | Change default logging level from none to urgent. Should never print | Daniel Hartmeier |
| 2002-03-25 | Ignore 'keep state' for ICMP errors whose inner headers mismatch state | Daniel Hartmeier |
| 2002-03-25 | add ioctl DIOCKILLSTATES to shootdown a subset of the state table. allows | Mike Frantzen |
| 2002-03-08 | Fix arc4random() usage; add more randomness to pf_get_sport(). | Mike Pechkin |
| 2002-02-26 | Add optional pool memory hard limits, mainly as temporary solution | Daniel Hartmeier |
| 2002-02-23 | Pools that are only used in the ioctls can use the nointr allocator. | Artur Grabowski |
| 2002-02-17 | Calculate IP checksum and copyback modified headers before logging a | Daniel Hartmeier |
| 2002-02-15 | pf only uses seconds for time measuring. There is no need to call microtime | Artur Grabowski |
| 2002-02-14 | KNF | Theo de Raadt |
| 2002-02-14 | Add skip steps for rule action (pass/block vs. scrub) and direction | Daniel Hartmeier |
| 2002-02-11 | Remove unused function prototype, from Jason Ish | Daniel Hartmeier |
| 2002-02-11 | Remove ancient comment regarding memcmp(), from Jason Ish | Daniel Hartmeier |
