| Age | Commit message (Expand) | Author |
|---|
| 2015-01-24 | Userland (base & ports) was adapted to always include <netinet/in.h> | Theo de Raadt |
| 2014-12-19 | unifdef INET in net code as a precursor to removing the pretend option. | Ted Unangst |
| 2014-12-05 | Explicitly include <net/if_var.h> instead of pulling it in <net/if.h>. | Martin Pieuchot |
| 2014-11-18 | move arc4random prototype to systm.h. more appropriate for most code | Ted Unangst |
| 2014-10-10 | s/lenght/length/ in comments | Stuart Henderson |
| 2014-09-08 | remove uneeded route.h includes | Jonathan Gray |
| 2014-07-22 | Fewer <netinet/in_systm.h> ! | Martin Pieuchot |
| 2014-07-13 | When reassembled IPv6 fragments are NATed or RDRed by pf, the | Alexander Bluhm |
| 2014-03-27 | When enforcing TOS (Traffic Class), preserve the ECN bits, just as we do | Jeremie Courreges-Anglas |
| 2014-01-22 | one more absolutely obvious bcopy -> memcpy | Henning Brauer |
| 2013-11-16 | Remove dead assignments and now unused variables. | Charles Longeau |
| 2013-10-17 | The header file netinet/in_var.h included netinet6/in6_var.h. This | Alexander Bluhm |
| 2013-10-01 | Format string fixes: Cast time_t to long long | Stefan Fritsch |
| 2013-07-23 | Do not reset the fragment timeout each time a fragment arrives. | Alexander Bluhm |
| 2013-06-26 | put the cksum diff back, of course with the bug fixed where we could | Henning Brauer |
| 2013-06-17 | Before pulling the TCP options from the mbuf onto the stack, do an | Alexander Bluhm |
| 2012-11-06 | backout csum diff for the moment, requested by theo | Henning Brauer |
| 2012-11-01 | redo most of the protocol (tcp/udp/...) checksum handling | Henning Brauer |
| 2012-10-30 | Use time_uptime for expiration values as time_second can be skewed at | Florian Obser |
| 2012-05-12 | Ignore/preserve ECN bits on ToS matching and scrubbing. | Marco Pfatschbacher |
| 2012-02-03 | The kernel did not compile without INET6. Put some #ifdefs into | Alexander Bluhm |
| 2012-01-26 | Clean up the pf normalization code: | Alexander Bluhm |
| 2012-01-23 | Do not keep state when dropping overlapping IPv6 fragments in pf | Alexander Bluhm |
| 2012-01-15 | Calling pf_normalize_ip() from pf_setup_pdesc() was bad as the | Alexander Bluhm |
| 2012-01-13 | Drop IPv6 packets built from overlapping fragments in pf reassembly. | Alexander Bluhm |
| 2012-01-03 | Instead of having two functions pf_free_fragment() and pf_remove_fragment() | Alexander Bluhm |
| 2011-11-25 | use time_uptime to set state creation values as time_second can be | David Gwynne |
| 2011-09-28 | As requested by henning, move the mbuf pointer into struct pf_pdesc. | Alexander Bluhm |
| 2011-09-22 | As I have touched half of pf lines anyway, fix whitespaces now. | Alexander Bluhm |
| 2011-09-21 | Check the protocol header length for tcp, udp, icmp, icmp6 in | Alexander Bluhm |
| 2011-09-20 | Put kif and dir into pdesc an use this instead of passing the values | Alexander Bluhm |
| 2011-09-19 | Consolidate pf function parameters. Move off and hdrlen into pdesc | Alexander Bluhm |
| 2011-09-18 | Fix various format string types to as a minimum match the width of the | Miod Vallat |
| 2011-07-18 | unbreak set-tos for ipv6; reported by babut at yandex dot ru, | Mike Belopuhov |
| 2011-07-07 | There were two loops in pf_setup_pdesc() and pf_normalize_ip6() | Alexander Bluhm |
| 2011-07-05 | Instead of passing the ip header and mbuf to pf_reassemble(), lookup | Alexander Bluhm |
| 2011-07-05 | add missing ifdefs for INET6; diff from form, ok henning, bluhm, claudio | Mike Belopuhov |
| 2011-07-03 | Refactor the fragment handling in pf_setup_pdesc() so that AF_INET | Claudio Jeker |
| 2011-06-21 | There is no need to handle fragmented TCP reset packets in a special | Alexander Bluhm |
| 2011-06-20 | More cleanup in pf_test/pf_test6 this time mostly the fragment | Claudio Jeker |
| 2011-05-24 | Merge pf_scrub_ip() and pf_scrub_ip6() into a single function. Call | Claudio Jeker |
| 2011-04-23 | pf_scrub_ip() does not modify the given mbuf pointer. So don't | Alexander Bluhm |
| 2011-04-04 | stop fiddling with the ip checksum here too, it is always recalculated | Henning Brauer |
| 2011-03-24 | Reassemble IPv6 fragments in pf. In the forward case, pf refragments | Alexander Bluhm |
| 2011-03-23 | Extract the address family independent functions from pf fragment | Alexander Bluhm |
| 2011-02-01 | The check for invalid IPv6 fragment size in pf_normalize_ip6() was | Alexander Bluhm |
| 2011-01-20 | The reason accounting in pf_reassemble() was not correct. Change | Alexander Bluhm |
| 2011-01-19 | Give pf_normalize_ip() the same 3 way semantics as pf_test(). | Alexander Bluhm |
| 2011-01-06 | Put htons() around ip_randomid() for pf scrub random-id to make it | Alexander Bluhm |
| 2010-12-31 | Remove dead code from pf_norm.c. The fragment cache is some leftover | Alexander Bluhm |
