| Age | Commit message (Expand) | Author |
|---|
| 2009-04-06 | 1) scrub rules are completely gone. | Henning Brauer |
| 2009-03-09 | Make the DIOCSETIFFLAG, DIOCSETLIMIT, and DIOCSETTIMEOUT ioctls | Ryan Thomas McBride |
| 2009-02-16 | pfsync v5, mostly written at n2k9, but based on work done at n2k8. | David Gwynne |
| 2009-01-29 | Split the address selection from pools away from pf.c and put it in | Pierre-Yves Ritschard |
| 2008-11-24 | Fix splasserts seen in pr 5987 by propagating a flag that discribes | Mike Belopuhov |
| 2008-10-08 | Get rid of the second table entry pool (pfr_kentry_pl2); we're already | Ryan Thomas McBride |
| 2008-09-22 | Reorder PFSTATE_PFLOW define: | Marco Pfatschbacher |
| 2008-09-09 | welcome pflow(4), a netflow v5 compatible flow export interface. | Henning Brauer |
| 2008-08-26 | introduce a function to be called when addressing information has changed, | Henning Brauer |
| 2008-07-03 | link pf state keys to tcp pcbs and vice versa. | Henning Brauer |
| 2008-06-29 | Simplify state creation code; merge state import/export code between pfsync | Ryan Thomas McBride |
| 2008-06-11 | store a pointer to the stack side state key in the mbuf packet | Henning Brauer |
| 2008-06-10 | Make counters on table addresses optional and disabled by default. | Ryan Thomas McBride |
| 2008-06-10 | save somespace in the state by collapsing two 8 bit ints used as booleans | Henning Brauer |
| 2008-06-10 | implement a sloppy tcpstate tracker which does not look at sequence | Henning Brauer |
| 2008-05-30 | trivial KNF before we go further | Henning Brauer |
| 2008-05-29 | Second half of PF state table rearrangement. | Ryan Thomas McBride |
| 2008-05-29 | rewrite the state table logic. | Henning Brauer |
| 2008-05-18 | KNF | Ryan Thomas McBride |
| 2008-05-09 | Add support to kill states by rule label or state id. | Marco Pfatschbacher |
| 2008-05-09 | divert packets to local socket without modifying the ip header; | Markus Friedl |
| 2008-05-08 | reorder elements in pf_state_peer to avoid wasting memory. cvs blame | Theo de Raadt |
| 2008-05-07 | scrub packets based on tags; ok henning | Markus Friedl |
| 2008-05-07 | allow setting TOS with scrub; ok mcbride, claudio | Markus Friedl |
| 2008-05-06 | Add a counter to record how many states have been created by a rule. | Marco Pfatschbacher |
| 2008-05-05 | remove a useless refcnt in pf_state_key. | Henning Brauer |
| 2007-12-02 | DIOC{GET,ADD}STATE incorrectly use a user provided pointer without using | Christopher Pascoe |
| 2007-09-27 | Add loginterface support for groups. | Marco Pfatschbacher |
| 2007-08-31 | zap unused "pf_tag" structure. | Thordur I. Bjornsson |
| 2007-08-30 | mechanic change: | Henning Brauer |
| 2007-08-30 | add support for address ranges ("from 10.1.2.50 - 10.1.3.75") in from/to | Daniel Hartmeier |
| 2007-07-13 | remove obsolete pfi_statehead and pfik_w_states; ok henning@ | Markus Friedl |
| 2007-06-25 | pretty mechanical change: now that the state tables use seperate state | Henning Brauer |
| 2007-06-24 | Save some bytes and make code more readable by removing junk union and | Ryan Thomas McBride |
| 2007-06-21 | reimplement interface bound states in a non-retarded way. | Henning Brauer |
| 2007-06-11 | move definitions for the flags in the mbuf header used by pf to mbuf.h | Henning Brauer |
| 2007-06-01 | factor out duplicated code to allocate state key and cross-reference it | Henning Brauer |
| 2007-05-31 | Make sure that pf_state_key and pf_state_key_cmp are in sync. | Ryan Thomas McBride |
| 2007-05-31 | Move the state id and creatorid (used mainly by pfsync) into struct pf_state. | Ryan Thomas McBride |
| 2007-05-31 | First step of rearranging pf's state table internals... | Ryan Thomas McBride |
| 2007-05-28 | double pf performance. | Henning Brauer |
| 2007-02-23 | if machine has more than 100MB of physmem, default the max table entries | Theo de Raadt |
| 2007-02-09 | allow counters to be reset with DIOCGETRULES. | Henning Brauer |
| 2006-12-13 | IPv6 passive OS fingerprinting. | Jun-ichiro itojun Hagino |
| 2006-11-20 | ioctl to explicitly remove source tracking nodes, | Ryan Thomas McBride |
| 2006-10-27 | Split ruleset manipulation functions out into pf_ruleset.c to allow them to | Ryan Thomas McBride |
| 2006-10-25 | add a "u_int8_t logif" to struct pfrule to select to which pflog interface | Henning Brauer |
| 2006-10-17 | increase max pf tag name size from 16 to 64 characters. | Reyk Floeter |
| 2006-10-11 | Allow the 'quick' keyword on an anchor. IFF there is a matching rule inside | Ryan Thomas McBride |
| 2006-07-06 | allow rules to point to an alternate routing table, and tag packets | Henning Brauer |
