Age | Commit message (Expand) | Author |
2011-07-18 | unbreak set-tos for ipv6; reported by babut at yandex dot ru, | Mike Belopuhov |
2011-07-07 | There were two loops in pf_setup_pdesc() and pf_normalize_ip6() | Alexander Bluhm |
2011-07-05 | Instead of passing the ip header and mbuf to pf_reassemble(), lookup | Alexander Bluhm |
2011-07-05 | add missing ifdefs for INET6; diff from form, ok henning, bluhm, claudio | Mike Belopuhov |
2011-07-03 | Refactor the fragment handling in pf_setup_pdesc() so that AF_INET | Claudio Jeker |
2011-06-21 | There is no need to handle fragmented TCP reset packets in a special | Alexander Bluhm |
2011-06-20 | More cleanup in pf_test/pf_test6 this time mostly the fragment | Claudio Jeker |
2011-05-24 | Merge pf_scrub_ip() and pf_scrub_ip6() into a single function. Call | Claudio Jeker |
2011-04-23 | pf_scrub_ip() does not modify the given mbuf pointer. So don't | Alexander Bluhm |
2011-04-04 | stop fiddling with the ip checksum here too, it is always recalculated | Henning Brauer |
2011-03-24 | Reassemble IPv6 fragments in pf. In the forward case, pf refragments | Alexander Bluhm |
2011-03-23 | Extract the address family independent functions from pf fragment | Alexander Bluhm |
2011-02-01 | The check for invalid IPv6 fragment size in pf_normalize_ip6() was | Alexander Bluhm |
2011-01-20 | The reason accounting in pf_reassemble() was not correct. Change | Alexander Bluhm |
2011-01-19 | Give pf_normalize_ip() the same 3 way semantics as pf_test(). | Alexander Bluhm |
2011-01-06 | Put htons() around ip_randomid() for pf scrub random-id to make it | Alexander Bluhm |
2010-12-31 | Remove dead code from pf_norm.c. The fragment cache is some leftover | Alexander Bluhm |
2010-07-08 | Use correct alignment for scrub max-mss. Based on a diff from deraadt. | Stuart Henderson |
2010-07-02 | m_copyback can fail to allocate memory, but is a void fucntion so gymnastics | Bret Lambert |
2010-01-18 | Convert pf debug logging to using log()/addlog(), a single standardised | Ryan Thomas McBride |
2009-09-01 | Clear the IP_DF bit if no-df is enabled, not if it is not enabled. | Joel Sing |
2009-07-21 | pf_scrub_ip/ip6 prototypes are already in pfvar.h | Henning Brauer |
2009-06-25 | scrub_flags is a u_int8_t, but PFSTATE_SCRUB_TCP is 0x0100, so the | Stuart Henderson |
2009-04-07 | after i took everything in this fiule apart and reassembled with a lot of | Henning Brauer |
2009-04-06 | 1) scrub rules are completely gone. | Henning Brauer |
2009-01-31 | unbreak ! INET6 case by sprinking #ifdef INET6 | Henning Brauer |
2009-01-29 | move some code around in preparation for future work: | Henning Brauer |
2008-05-07 | scrub packets based on tags; ok henning | Markus Friedl |
2008-05-07 | allow setting TOS with scrub; ok mcbride, claudio | Markus Friedl |
2007-12-30 | In pf_normalize_tcpopt() call pf_pull_hdr() address family safe. | Marcus Glocker |
2007-12-30 | Make "scrub max-mss" rule work correctly; | Marcus Glocker |
2007-05-28 | double pf performance. | Henning Brauer |
2007-05-26 | More comment typos from Diego Casati. Including winners like funtion, allmost, | Kenneth R Westerback |
2006-04-16 | After fragment reassembly/trimming, pf must revalidate the mbuf tag of the | Christopher Pascoe |
2006-03-25 | fixup IP checksum when modifying IP header fields, based on a patch in | Daniel Hartmeier |
2006-03-14 | implement a Unicast Reverse Path Forwarding (uRPF) check for pf(4) | Damien Miller |
2006-01-18 | fix a bug in the fragment cache (used for 'scrub fragment crop/drop-ovl', | Daniel Hartmeier |
2005-10-17 | make pf use one mbuf tag instead of 6 distinct ones. use a little struct | Henning Brauer |
2005-08-06 | correct some spellos | Christopher Pascoe |
2005-06-13 | make the packet and byte counters on rules and src nodes per direction, | Henning Brauer |
2005-05-27 | log two pairs of uid/pid through pflog: the uid/pid of the process that | Daniel Hartmeier |
2005-05-22 | honour the 'no' in 'no scrub' rules for IP normalizations. found by | Daniel Hartmeier |
2005-05-21 | clean up and rework the interface absraction code big time, rip out multiple | Henning Brauer |
2004-09-21 | Implement "no scrub" to allow exclusion of specific traffic from scrub rules. | Aaron Campbell |
2004-07-17 | Repair breakage from the hackathon's time conversion. Using the timestamp | Mike Frantzen |
2004-07-11 | backout IPv6 reass-on-scrub patch (more work needs to be done). | Jun-ichiro itojun Hagino |
2004-07-05 | KNF | Henning Brauer |
2004-07-03 | quick workaround until proper PF_FORWARD reass gets implemented. | Jun-ichiro itojun Hagino |
2004-06-25 | correct "scrub in" behavior for IPv6. | Jun-ichiro itojun Hagino |
2004-06-25 | IPv6 reassembly on "scrub" directive. | Jun-ichiro itojun Hagino |