Age | Commit message (Expand) | Author |
2004-12-05 | after attaching an overload table, set its active flag. otherwise, the | Daniel Hartmeier |
2004-12-04 | Add kernel code to keep track of tcp connections which have completed | Ryan Thomas McBride |
2004-12-01 | replace finer-grained spl locking in pfioctl() with a single broad lock | Daniel Hartmeier |
2004-09-21 | Implement "no scrub" to allow exclusion of specific traffic from scrub rules. | Aaron Campbell |
2004-09-09 | Copy out anchors with relative paths and wildcards correctly, | Daniel Hartmeier |
2004-07-22 | Add missing check for NULL in DIOCCHANGERULE. This prevents a crash in | Mathieu Sauve-Frankel |
2004-07-05 | KNF | Henning Brauer |
2004-06-21 | First step towards more sane time handling in the kernel -- this changes | Thorsten Lockert |
2004-06-14 | Remove DIOCBEGINRULES, DIOCCOMMITRULES, DIOCBEGINALTQS, DIOCCOMMITALTQS, | Cedric Berger |
2004-06-10 | rename struct pf_rule_addr member 'not' to 'neg', as 'not' is a reserved | Daniel Hartmeier |
2004-05-31 | thinko, reported by Fernando Braga | Daniel Hartmeier |
2004-05-21 | Use '/' instead of ':' as separator for anchor path components. Note that | Daniel Hartmeier |
2004-05-21 | copy out relative anchor paths correctly | Daniel Hartmeier |
2004-05-19 | Allow recursive anchors (anchors within anchors, up to 64 | Daniel Hartmeier |
2004-05-18 | In DIOCCHANGERULE, move ticket increment above code that might free | Daniel Hartmeier |
2004-05-05 | Use RFC1323 PAWS timestamps as a logical extension to the conventional TCP | Mike Frantzen |
2004-05-03 | fix a stupid mistake in my previous commit. | Kenjiro Cho |
2004-04-28 | Dont step into INET6 code, just because af != AF_INET | Philipp Buehler |
2004-04-27 | make separate functions to enable/disable altq, and call them when we | Kenjiro Cho |
2004-04-26 | The rule_number parameter for pf_get_pool() needs to be 32 bits, not 8 - | Ryan Thomas McBride |
2004-04-26 | anchor refcounting. ok dhartmei@ mcbride@ | Cedric Berger |
2004-04-09 | move some of the non-interrupt pools from the small kmem_map to the much | Mike Frantzen |
2004-03-22 | Support for best effort bulk transfers of states when pfsync syncif is | Ryan Thomas McBride |
2004-03-18 | state->rule.ptr shall not be NULL. from Jon Coller. ok dhartmei@ mcbride@ | Cedric Berger |
2004-03-15 | plug memory leak in error path | Henning Brauer |
2004-03-09 | KNF, ok cedric@ deraadt@ | Ryan Thomas McBride |
2004-02-20 | Make pfsync deal with clearing states bound to a group or interface (eg | Ryan Thomas McBride |
2004-02-19 | Makes pfctl -Fs and pfctl -w works with the optional -i specifier. | Cedric Berger |
2004-02-19 | the 2nd round of the qid assignment change. | Kenjiro Cho |
2004-02-13 | Do an explicit pf_update_anchor_rules() after an anchor gets removed. | Marco Pfatschbacher |
2004-02-10 | KNF | Daniel Hartmeier |
2004-02-10 | KNF | Henning Brauer |
2004-02-09 | Repair "set loginterface". Don't flush stats on pfctl -e. pf_status.since | Cedric Berger |
2004-02-04 | Fix a number of bugs with setting pool limits which I introduced with | Ryan Thomas McBride |
2004-01-05 | Repair my merging error, simplify DIOCCLRSTATUS code. ok dhartmei@ | Cedric Berger |
2004-01-05 | Repair merge errors. Thanks Pyun YongHyeon, Sorry Henning :) | Cedric Berger |
2003-12-31 | spacing. note this, cedric | Theo de Raadt |
2003-12-31 | Many improvements to the handling of interfaces in PF. | Cedric Berger |
2003-12-22 | pasto in pf_status.src_nodes backup, from 'kirash' | Daniel Hartmeier |
2003-12-19 | i wrote much of these, assert my copyright | Henning Brauer |
2003-12-18 | Save pf_status.hostid and pf_status.stateid in the DIOCCLRSTATUS | Ryan Thomas McBride |
2003-12-18 | Unbreak compile with no pfsync(4) device. | Ryan Thomas McBride |
2003-12-15 | ryan left a few for me ;-) | Henning Brauer |
2003-12-15 | Fix whitespace screwups before henning wakes up. | Ryan Thomas McBride |
2003-12-15 | Add initial support for pf state synchronization over the network. | Ryan Thomas McBride |
2003-12-15 | Add support to track stateful connections by source ip. This allows us | Ryan Thomas McBride |
2003-12-12 | Move PF interface code to new net/pf_if.c | Cedric Berger |
2003-11-02 | Don't zero the debug level when we enable pf. | Ryan Thomas McBride |
2003-10-25 | Build state search indexes directly on pf_state instead of pf_tree_node. | Ryan Thomas McBride |
2003-10-19 | Add missing "#ifdef ALTQ"'s in the ioctl transacions code. | Ryan Thomas McBride |