| Age | Commit message (Expand) | Author |
|---|
| 2009-11-23 | remove the nat_rule pointer on pf_state and pf_pdesc, obsolete after | Henning Brauer |
| 2009-11-22 | cleanup after the NAT changes. we used to have multiple rulesets (scrub, | Henning Brauer |
| 2009-11-03 | Use u_int16_t for rdomains for everything. Using various types makes | Claudio Jeker |
| 2009-11-03 | rtables are stacked on rdomains (it is possible to have multiple routing | Claudio Jeker |
| 2009-10-28 | Add a dedicated pf pool for route options as suggested by henning, | Jonathan Gray |
| 2009-10-06 | Redo the route lookup in the output (and IPv6 forwarding) path if the | Claudio Jeker |
| 2009-10-04 | Add (again) support for divert sockets. They allow you to: | Michele Marchetto |
| 2009-09-08 | I had not enough oks to commit this diff. | Michele Marchetto |
| 2009-09-08 | Add support for divert sockets. They allow you to: | Michele Marchetto |
| 2009-09-01 | the diff theo calls me insanae for: | Henning Brauer |
| 2009-06-25 | scrub_flags is a u_int8_t, but PFSTATE_SCRUB_TCP is 0x0100, so the | Stuart Henderson |
| 2009-06-08 | bring back the fixed PF_AEQ/ANEQ/AZERO macros, the offending use has been | Henning Brauer |
| 2009-06-08 | gah. something is not quite right, sthen sees strange behaviour fixed | Henning Brauer |
| 2009-06-08 | unfuck PF_AEQ PF_ANEQ PF_AZERO macos that got fucked when v6 support | Henning Brauer |
| 2009-05-18 | The routing table index rtableid has type unsigned int in the routing | Alexander Bluhm |
| 2009-04-06 | 1) scrub rules are completely gone. | Henning Brauer |
| 2009-03-09 | Make the DIOCSETIFFLAG, DIOCSETLIMIT, and DIOCSETTIMEOUT ioctls | Ryan Thomas McBride |
| 2009-02-16 | pfsync v5, mostly written at n2k9, but based on work done at n2k8. | David Gwynne |
| 2009-01-29 | Split the address selection from pools away from pf.c and put it in | Pierre-Yves Ritschard |
| 2008-11-24 | Fix splasserts seen in pr 5987 by propagating a flag that discribes | Mike Belopuhov |
| 2008-10-08 | Get rid of the second table entry pool (pfr_kentry_pl2); we're already | Ryan Thomas McBride |
| 2008-09-22 | Reorder PFSTATE_PFLOW define: | Marco Pfatschbacher |
| 2008-09-09 | welcome pflow(4), a netflow v5 compatible flow export interface. | Henning Brauer |
| 2008-08-26 | introduce a function to be called when addressing information has changed, | Henning Brauer |
| 2008-07-03 | link pf state keys to tcp pcbs and vice versa. | Henning Brauer |
| 2008-06-29 | Simplify state creation code; merge state import/export code between pfsync | Ryan Thomas McBride |
| 2008-06-11 | store a pointer to the stack side state key in the mbuf packet | Henning Brauer |
| 2008-06-10 | Make counters on table addresses optional and disabled by default. | Ryan Thomas McBride |
| 2008-06-10 | save somespace in the state by collapsing two 8 bit ints used as booleans | Henning Brauer |
| 2008-06-10 | implement a sloppy tcpstate tracker which does not look at sequence | Henning Brauer |
| 2008-05-30 | trivial KNF before we go further | Henning Brauer |
| 2008-05-29 | Second half of PF state table rearrangement. | Ryan Thomas McBride |
| 2008-05-29 | rewrite the state table logic. | Henning Brauer |
| 2008-05-18 | KNF | Ryan Thomas McBride |
| 2008-05-09 | Add support to kill states by rule label or state id. | Marco Pfatschbacher |
| 2008-05-09 | divert packets to local socket without modifying the ip header; | Markus Friedl |
| 2008-05-08 | reorder elements in pf_state_peer to avoid wasting memory. cvs blame | Theo de Raadt |
| 2008-05-07 | scrub packets based on tags; ok henning | Markus Friedl |
| 2008-05-07 | allow setting TOS with scrub; ok mcbride, claudio | Markus Friedl |
| 2008-05-06 | Add a counter to record how many states have been created by a rule. | Marco Pfatschbacher |
| 2008-05-05 | remove a useless refcnt in pf_state_key. | Henning Brauer |
| 2007-12-02 | DIOC{GET,ADD}STATE incorrectly use a user provided pointer without using | Christopher Pascoe |
| 2007-09-27 | Add loginterface support for groups. | Marco Pfatschbacher |
| 2007-08-31 | zap unused "pf_tag" structure. | Thordur I. Bjornsson |
| 2007-08-30 | mechanic change: | Henning Brauer |
| 2007-08-30 | add support for address ranges ("from 10.1.2.50 - 10.1.3.75") in from/to | Daniel Hartmeier |
| 2007-07-13 | remove obsolete pfi_statehead and pfik_w_states; ok henning@ | Markus Friedl |
| 2007-06-25 | pretty mechanical change: now that the state tables use seperate state | Henning Brauer |
| 2007-06-24 | Save some bytes and make code more readable by removing junk union and | Ryan Thomas McBride |
| 2007-06-21 | reimplement interface bound states in a non-retarded way. | Henning Brauer |
