| Age | Commit message (Expand) | Author |
|---|
| 2016-10-26 | Put union pf_headers and struct pf_pdesc into separate header file | Alexander Bluhm |
| 2016-09-27 | roll back turning RB into RBT until i get better at this process. | David Gwynne |
| 2016-09-27 | move pf from the RB macros to the RBT functions. | David Gwynne |
| 2016-09-15 | all pools have their ipl set via pool_setipl, so fold it into pool_init. | David Gwynne |
| 2016-09-02 | pool_setipl for pf bits | David Gwynne |
| 2016-08-24 | Kill ip6_forward_rt reducing differences between v4 and v6. | Martin Pieuchot |
| 2016-08-17 | Reintroduce 5.3-style checksum modification to preserve end-to-end checksums | procter |
| 2016-06-15 | Kill nd6_output(), it doesn't do anything since the resolution logic | Martin Pieuchot |
| 2016-06-15 | There's no need to convert values returned by arc4random to the network | Mike Belopuhov |
| 2016-05-31 | Do not call nd6_output() without route entry argument. | Martin Pieuchot |
| 2016-05-28 | Backout pf.c r1.972, pf_norm.c r1.184, ok claudio | Stuart Henderson |
| 2016-05-24 | Do not call nd6_output() without route entry argument. | Martin Pieuchot |
| 2015-11-24 | No need for <net/if_types.h> | Martin Pieuchot |
| 2015-09-10 | Kill two simple in6_ifstat_inc(). | Martin Pieuchot |
| 2015-08-19 | PF must keep IPv6 fragment size as chosen by sender also for packets, | Alexandr Nedvedicky |
| 2015-07-19 | unused arguments at pf_normalize_tcp_init() and pf_refragment6() | sashan |
| 2015-07-18 | INET/INET6 address family check should be unified in PF | sashan |
| 2015-05-05 | Eliminate rabid semicolon | Chris Cappuccio |
| 2015-04-29 | In most cases, IP fragments do not have an Ethernet padding. So | Alexander Bluhm |
| 2015-04-17 | On Ethernet packets have a minimal length, so very short packets | Alexander Bluhm |
| 2015-03-14 | Remove some includes include-what-you-use claims don't | Jonathan Gray |
| 2015-02-08 | pf normalization code was in dire need of style normalization. | Henning Brauer |
| 2015-01-24 | Userland (base & ports) was adapted to always include <netinet/in.h> | Theo de Raadt |
| 2014-12-19 | unifdef INET in net code as a precursor to removing the pretend option. | Ted Unangst |
| 2014-12-05 | Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>. | Martin Pieuchot |
| 2014-11-18 | move arc4random prototype to systm.h. more appropriate for most code | Ted Unangst |
| 2014-10-10 | s/lenght/length/ in comments | Stuart Henderson |
| 2014-09-08 | remove uneeded route.h includes | Jonathan Gray |
| 2014-07-22 | Fewer <netinet/in_systm.h> ! | Martin Pieuchot |
| 2014-07-13 | When reassembled IPv6 fragments are NATed or RDRed by pf, the | Alexander Bluhm |
| 2014-03-27 | When enforcing TOS (Traffic Class), preserve the ECN bits, just as we do | Jeremie Courreges-Anglas |
| 2014-01-22 | one more absolutely obvious bcopy -> memcpy | Henning Brauer |
| 2013-11-16 | Remove dead assignments and now unused variables. | Charles Longeau |
| 2013-10-17 | The header file netinet/in_var.h included netinet6/in6_var.h. This | Alexander Bluhm |
| 2013-10-01 | Format string fixes: Cast time_t to long long | Stefan Fritsch |
| 2013-07-23 | Do not reset the fragment timeout each time a fragment arrives. | Alexander Bluhm |
| 2013-06-26 | put the cksum diff back, of course with the bug fixed where we could | Henning Brauer |
| 2013-06-17 | Before pulling the TCP options from the mbuf onto the stack, do an | Alexander Bluhm |
| 2012-11-06 | backout csum diff for the moment, requested by theo | Henning Brauer |
| 2012-11-01 | redo most of the protocol (tcp/udp/...) checksum handling | Henning Brauer |
| 2012-10-30 | Use time_uptime for expiration values as time_second can be skewed at | Florian Obser |
| 2012-05-12 | Ignore/preserve ECN bits on ToS matching and scrubbing. | Marco Pfatschbacher |
| 2012-02-03 | The kernel did not compile without INET6. Put some #ifdefs into | Alexander Bluhm |
| 2012-01-26 | Clean up the pf normalization code: | Alexander Bluhm |
| 2012-01-23 | Do not keep state when dropping overlapping IPv6 fragments in pf | Alexander Bluhm |
| 2012-01-15 | Calling pf_normalize_ip() from pf_setup_pdesc() was bad as the | Alexander Bluhm |
| 2012-01-13 | Drop IPv6 packets built from overlapping fragments in pf reassembly. | Alexander Bluhm |
| 2012-01-03 | Instead of having two functions pf_free_fragment() and pf_remove_fragment() | Alexander Bluhm |
| 2011-11-25 | use time_uptime to set state creation values as time_second can be | David Gwynne |
| 2011-09-28 | As requested by henning, move the mbuf pointer into struct pf_pdesc. | Alexander Bluhm |
