Age | Commit message (Expand) | Author |
2010-09-22 | add a new log opt PF_LOG_MATCHES | Henning Brauer |
2010-09-21 | assert copyrights / bump years | Henning Brauer |
2010-09-21 | make pf_translate (void so far) return 1 if it actually changed something | Henning Brauer |
2010-09-21 | factor our the code to set up pf_pdesc, a central structure in pf carrying | Henning Brauer |
2010-06-28 | Clean up iterface stats handling: | Ryan Thomas McBride |
2010-06-27 | stuff nsaddr/ndaddr/nsport/ndport (addrs/ports after NAT, used a lot while | Henning Brauer |
2010-05-07 | Start cleaning up the mess called rtalloc*. Kill rtalloc2, make rtalloc1 | Claudio Jeker |
2010-04-28 | Cast 'a' to (void *) in the REASON_SET macro. Makes gcc4 happy. | Robert Nagy |
2010-01-20 | One \ too many in pfvar.h. From Daniel Dickman <didickman@gmail.com> | Ryan Thomas McBride |
2010-01-18 | Convert pf debug logging to using log()/addlog(), a single standardised | Ryan Thomas McBride |
2010-01-13 | Remove extern reference to pf_pabuf which uses a struct | Jonathan Gray |
2010-01-12 | First pass at removing the 'pf_pool' mechanism for translation and routing | Ryan Thomas McBride |
2009-12-24 | add support to pf for filtering a packet by the interface it was received | David Gwynne |
2009-12-14 | fix sticky-address - by pretty much re-implementing it. still following | Henning Brauer |
2009-11-24 | kill obsolete natpass | Henning Brauer |
2009-11-23 | remove the nat_rule pointer on pf_state and pf_pdesc, obsolete after | Henning Brauer |
2009-11-22 | cleanup after the NAT changes. we used to have multiple rulesets (scrub, | Henning Brauer |
2009-11-03 | Use u_int16_t for rdomains for everything. Using various types makes | Claudio Jeker |
2009-11-03 | rtables are stacked on rdomains (it is possible to have multiple routing | Claudio Jeker |
2009-10-28 | Add a dedicated pf pool for route options as suggested by henning, | Jonathan Gray |
2009-10-06 | Redo the route lookup in the output (and IPv6 forwarding) path if the | Claudio Jeker |
2009-10-04 | Add (again) support for divert sockets. They allow you to: | Michele Marchetto |
2009-09-08 | I had not enough oks to commit this diff. | Michele Marchetto |
2009-09-08 | Add support for divert sockets. They allow you to: | Michele Marchetto |
2009-09-01 | the diff theo calls me insanae for: | Henning Brauer |
2009-06-25 | scrub_flags is a u_int8_t, but PFSTATE_SCRUB_TCP is 0x0100, so the | Stuart Henderson |
2009-06-08 | bring back the fixed PF_AEQ/ANEQ/AZERO macros, the offending use has been | Henning Brauer |
2009-06-08 | gah. something is not quite right, sthen sees strange behaviour fixed | Henning Brauer |
2009-06-08 | unfuck PF_AEQ PF_ANEQ PF_AZERO macos that got fucked when v6 support | Henning Brauer |
2009-05-18 | The routing table index rtableid has type unsigned int in the routing | Alexander Bluhm |
2009-04-06 | 1) scrub rules are completely gone. | Henning Brauer |
2009-03-09 | Make the DIOCSETIFFLAG, DIOCSETLIMIT, and DIOCSETTIMEOUT ioctls | Ryan Thomas McBride |
2009-02-16 | pfsync v5, mostly written at n2k9, but based on work done at n2k8. | David Gwynne |
2009-01-29 | Split the address selection from pools away from pf.c and put it in | Pierre-Yves Ritschard |
2008-11-24 | Fix splasserts seen in pr 5987 by propagating a flag that discribes | Mike Belopuhov |
2008-10-08 | Get rid of the second table entry pool (pfr_kentry_pl2); we're already | Ryan Thomas McBride |
2008-09-22 | Reorder PFSTATE_PFLOW define: | Marco Pfatschbacher |
2008-09-09 | welcome pflow(4), a netflow v5 compatible flow export interface. | Henning Brauer |
2008-08-26 | introduce a function to be called when addressing information has changed, | Henning Brauer |
2008-07-03 | link pf state keys to tcp pcbs and vice versa. | Henning Brauer |
2008-06-29 | Simplify state creation code; merge state import/export code between pfsync | Ryan Thomas McBride |
2008-06-11 | store a pointer to the stack side state key in the mbuf packet | Henning Brauer |
2008-06-10 | Make counters on table addresses optional and disabled by default. | Ryan Thomas McBride |
2008-06-10 | save somespace in the state by collapsing two 8 bit ints used as booleans | Henning Brauer |
2008-06-10 | implement a sloppy tcpstate tracker which does not look at sequence | Henning Brauer |
2008-05-30 | trivial KNF before we go further | Henning Brauer |
2008-05-29 | Second half of PF state table rearrangement. | Ryan Thomas McBride |
2008-05-29 | rewrite the state table logic. | Henning Brauer |
2008-05-18 | KNF | Ryan Thomas McBride |
2008-05-09 | Add support to kill states by rule label or state id. | Marco Pfatschbacher |