| Age | Commit message (Expand) | Author |
|---|
| 2013-03-28 | no need for a lot of code to include proc.h | Ted Unangst |
| 2013-03-27 | Use the correct src/dst ports depending on direction (one of src or dst was | Ryan Thomas McBride |
| 2013-02-26 | Don't try to purge one-time rules from the main ruleset. | Mike Belopuhov |
| 2012-10-30 | Use time_uptime for expiration values as time_second can be skewed at | Florian Obser |
| 2012-09-20 | Lower pf frags limit to not risk running out of mbuf clusters | Camiel Dobbelaar |
| 2012-09-18 | prio 0 is valid, therefore, I chose an "impossible" value for prio meaning | Henning Brauer |
| 2012-07-08 | there was a limit on the number of pflog interfaces - 16. remove that. | Henning Brauer |
| 2012-07-07 | rename prio in struct pf_rule and related structs to set_prio so it is | Henning Brauer |
| 2012-07-07 | restore DIOCKILLSTATE semantics to what they were before the NAT rewrite. | Henning Brauer |
| 2012-04-03 | Fix kernel compilation with pf but without pfsync pseudo-device by | Mike Belopuhov |
| 2012-03-28 | Another pid that needs to be the process pid and not the thread one. | Claudio Jeker |
| 2011-12-12 | fixup af-to regression with match rules | Mike Belopuhov |
| 2011-11-29 | use a u_int64_t for the state id in pfsync_state. this makes it consistent | David Gwynne |
| 2011-11-28 | deprecate PFTM_UNTIL_PACKET. nothing in the tree uses it, and | David Gwynne |
| 2011-11-25 | use time_uptime to set state creation values as time_second can be | David Gwynne |
| 2011-10-13 | Since the IPv6 madness is not enough introduce NAT64 -- which is actually | Claudio Jeker |
| 2011-10-07 | rename some vars and functions | Henning Brauer |
| 2011-08-30 | Add support for one shot rules that remove themselves from an active | Mike Belopuhov |
| 2011-07-08 | surprisingly, we use pf as classifier for the new priority queueing | Henning Brauer |
| 2011-06-02 | Don't destroy a non-persistent table if referenced by src_nodes. Fixes | Stuart Henderson |
| 2011-04-19 | Fix potential null dereference. | Charles Longeau |
| 2011-04-06 | Allow PF to filter on the rdomain a packet belongs to. This allows to | Claudio Jeker |
| 2011-03-25 | Include original rdomain in DIOCNATLOOK. This allows userland proxies | Claudio Jeker |
| 2010-12-15 | Be more careful when copying the pf rule from userland into the kernel. | Claudio Jeker |
| 2010-06-30 | fix route label awesomeness, issue also known as PR6416 | Henning Brauer |
| 2010-06-28 | Clean up iterface stats handling: | Ryan Thomas McBride |
| 2010-06-27 | Fix DIOCCHANGERULE ioctl broken in the remove of the address pools. | Ryan Thomas McBride |
| 2010-01-18 | Convert pf debug logging to using log()/addlog(), a single standardised | Ryan Thomas McBride |
| 2010-01-12 | First pass at removing the 'pf_pool' mechanism for translation and routing | Ryan Thomas McBride |
| 2009-12-24 | add support to pf for filtering a packet by the interface it was received | David Gwynne |
| 2009-12-14 | fix sticky-address - by pretty much re-implementing it. still following | Henning Brauer |
| 2009-11-24 | kill obsolete natpass | Henning Brauer |
| 2009-11-23 | remove the nat_rule pointer on pf_state and pf_pdesc, obsolete after | Henning Brauer |
| 2009-11-22 | cleanup after the NAT changes. we used to have multiple rulesets (scrub, | Henning Brauer |
| 2009-11-11 | Fix some memory leaks in error cases. | Jonathan Gray |
| 2009-11-03 | Use u_int16_t for rdomains for everything. Using various types makes | Claudio Jeker |
| 2009-11-03 | rtables are stacked on rdomains (it is possible to have multiple routing | Claudio Jeker |
| 2009-10-28 | Add a dedicated pf pool for route options as suggested by henning, | Jonathan Gray |
| 2009-10-06 | Replace if (af) tests operating as an af blacklist with stricter switch | Ryan Thomas McBride |
| 2009-09-01 | the diff theo calls me insanae for: | Henning Brauer |
| 2009-05-31 | make set loginterface, set hostid, set reassemble and set debug | Henning Brauer |
| 2009-04-16 | Really turn fragment reassembly on by default. pfctl must handle this | David Krause |
| 2009-04-07 | turn fragment reassembly on by default. the is little to no reason to | Henning Brauer |
| 2009-04-06 | 1) scrub rules are completely gone. | Henning Brauer |
| 2009-03-09 | Make the DIOCSETIFFLAG, DIOCSETLIMIT, and DIOCSETTIMEOUT ioctls | Ryan Thomas McBride |
| 2009-02-16 | pfsync v5, mostly written at n2k9, but based on work done at n2k8. | David Gwynne |
| 2009-02-15 | Revert previous. | Marc Balmer |
| 2009-02-15 | Fix compilation of kernels that have pf, but not pfsync. | Marc Balmer |
| 2008-11-24 | Fix splasserts seen in pr 5987 by propagating a flag that discribes | Mike Belopuhov |
| 2008-10-23 | use the correct idiom for NFOO things which come from "foo.h" files | Theo de Raadt |
