Age | Commit message (Collapse) | Author | |
---|---|---|---|
2001-07-01 | tag packets generated by pf (return-rst, return-icmp) so they are not ↵ | Daniel Hartmeier | |
filtered, use existing icmp_error() and ip_output(). ok dugsong@, frantzen@ | |||
2001-07-01 | Add port ranges to the rdr directive. Connections can be redirected | Kjell Wooding | |
to either a range of the same size, or a single port. Redirects between ranges of different sizes are not supported. Eg: rdr dc0 10.0.0.0/24 port 60000:61000 -> 127.0.0.1 port 65530:* proto udp rdr xl0 0.0.0.0/0 port 6660:6669 -> 127.0.0.1 port 6667 proto tcp This replaces the wildcard port patch (when port = 0), as it should no longer be necessary. ok dhartmei@ | |||
2001-06-29 | Fix PF_SCRUB enumerator. | Angelos D. Keromytis | |
2001-06-29 | fix counter/reason array usage | Daniel Hartmeier | |
2001-06-28 | first stab at packet normalization. includes full ip reassembly. | Niels Provos | |
okay dhartmei@, dugsong@ | |||
2001-06-27 | add -z flag for zeroing statistics. -s status no longer resets anything | Kjell Wooding | |
2001-06-27 | state counter changes | Theo de Raadt | |
2001-06-26 | name comparison operators | Dug Song | |
2001-06-26 | fix PFRES_MAX handling | Theo de Raadt | |
2001-06-26 | array of counters indexed by reason codes | Theo de Raadt | |
2001-06-26 | add rule nr for Niels | Daniel Hartmeier | |
2001-06-26 | add rule pointer and log option to states | Daniel Hartmeier | |
2001-06-26 | use reasons in pull_hdr, default log if pull_hdr fails. okay deraadt@ | Niels Provos | |
2001-06-26 | no longer pass around **m | Theo de Raadt | |
2001-06-26 | add a subreason to the link header to allow us to determine why a packet was | Niels Provos | |
dropped or passed. from discussion with theo and me. | |||
2001-06-26 | Replicated TCP sequence tracking code in PF from Guido's IPF paper. | Mike Frantzen | |
2001-06-25 | remaining lists converted to TAILQs | Daniel Hartmeier | |
2001-06-25 | use TAILQ instead of homegrown list, other lists will follow | Daniel Hartmeier | |
2001-06-25 | revised ioctl interface, first getopt version of pfctl | Daniel Hartmeier | |
2001-06-25 | Rename the rest of the structs to be consistent. | Artur Grabowski | |
2001-06-25 | More renaming. | Artur Grabowski | |
2001-06-25 | Avoid common names. Needs more work. | Artur Grabowski | |
2001-06-25 | use only ioctl return values found in errno.h | Daniel Hartmeier | |
2001-06-24 | rename ioctlbuffer to pfioc. | Artur Grabowski | |
2001-06-24 | pack structures better; dhartmei ok | Theo de Raadt | |
2001-06-24 | REGENTS? ;) | Daniel Hartmeier | |
2001-06-24 | PACKETFILTER_H now PFVAR_H. thanks smart | Kjell Wooding | |
2001-06-24 | Initial import of pf, an all-new ipf-compatable packet filter. | Kjell Wooding | |
Insane amounts of work done my dhartmei. Great work! |