Age | Commit message (Expand) | Author |
2003-02-08 | Add scrub option 'random-id', which replaces IP IDs with random values | Daniel Hartmeier |
2003-01-21 | Support for TCP window scaling (RFC 1323). ok frantzen@ | Daniel Hartmeier |
2003-01-15 | Fix a buglet when one "creates" a table which is already in the | Cedric Berger |
2003-01-10 | Fix adding and deleting addresses in a table when there is a conflict with | Cedric Berger |
2003-01-09 | (whitespace) KNF, re-fold -w 80 | Daniel Hartmeier |
2003-01-09 | Add support for active/inactive tablesets in the kernel. | Cedric Berger |
2003-01-07 | Remove table name hashing (pass the name in each ioctl instead), and | Daniel Hartmeier |
2003-01-06 | Move initialisation of radix table globals in pfr_initialize() | Cedric Berger |
2003-01-05 | Move ifname from pf_addr to pf_addr_wrap, prepare pf_addr_wrap for table | Daniel Hartmeier |
2003-01-04 | move noroute from flag in pf_rule_addr into type in pf_addr_wrap. | Daniel Hartmeier |
2003-01-03 | 1) pfr_insert_kentries() cannot return ENOMEM anymore -> make it void. | Cedric Berger |
2003-01-02 | Remove explicit numbering of enums. | Ryan Thomas McBride |
2003-01-01 | use a #define for the default state table size | Henning Brauer |
2003-01-01 | Behaves correctly when duplicate addresses are given in the same ioctl. | Cedric Berger |
2003-01-01 | Remove skip step for action (scrub vs. non-scrub), as scrub rules are | Daniel Hartmeier |
2002-12-31 | Split scrub rules out from the filter rules in the kernel. | Ryan Thomas McBride |
2002-12-29 | Add support for radix tables for source and destination of PF rules. | Cedric Berger |
2002-12-23 | Change from array to single pf_pabuf (no longer need multiple buffers as | Ryan Thomas McBride |
2002-12-22 | pfioc_changealtq is not needed anymore; queues will eventually be | Ryan Thomas McBride |
2002-12-22 | mv PF_RULESET_MAX into the enum, slightly less confusing. | Ryan Thomas McBride |
2002-12-18 | Store translation rule pointer in state entries, so pfctl -vsn can print | Daniel Hartmeier |
2002-12-18 | little style | Henning Brauer |
2002-12-18 | Pass skip step values through ioctl interface, pfctl -vvsr shows them, | Daniel Hartmeier |
2002-12-17 | Merge pf_nat/pf_binat/pf_rdr structs into pf_rule. Simplifies code, allows | Ryan Thomas McBride |
2002-12-16 | add options for 2 more queueing disciplines, PRIQ and HFSC. | Kenjiro Cho |
2002-12-13 | add pqueue and pqid to pf_rule. | Henning Brauer |
2002-12-12 | minor KNF | Henning Brauer |
2002-12-06 | Introduce anchors and named rule sets, allowing to load additional rule | Daniel Hartmeier |
2002-12-01 | - Clean up pf_ioctl mainly by adding new functions to handle cleaning and | Ryan Thomas McBride |
2002-11-29 | expose state table changes | Michael Shalayeff |
2002-11-28 | - MD5 too slow, replace with pf_hash (based on hash from if_bridge.c) | Ryan Thomas McBride |
2002-11-26 | pass struct pfioc_changeaddr to DIOCCHANGEADDR | Ryan Thomas McBride |
2002-11-23 | KNF | Theo de Raadt |
2002-11-23 | kernel code to allow multiple redirection addresses to be specified for nat | Ryan Thomas McBride |
2002-11-02 | Make PF_ANEQ(), PF_ANEQ() and PF_AZERO() check the whole address if af | Ryan Thomas McBride |
2002-10-22 | Convert "int af" and "u_int8_t af" declarations and function arguments | Ryan Thomas McBride |
2002-10-20 | Move pf_compare_(rules|nats|binats|rdrs) to pf_ioctl.c. Simplifies and | Ryan Thomas McBride |
2002-10-14 | Allow one to specify a netblock in a binat rule: | Henning Brauer |
2002-10-10 | padd pf_state; dhartmei@ ok | Michael Shalayeff |
2002-10-08 | the first step of pf/altq merge. | Kenjiro Cho |
2002-10-07 | set block-policy [drop|return] | Henning Brauer |
2002-10-07 | support a generic return | Henning Brauer |
2002-10-07 | make return-icmp work for rules covering both v4 and v6 | Henning Brauer |
2002-10-07 | use a new rule_flag PFRULE_RETURNICMP to decide wether to return-icmp or not | Henning Brauer |
2002-10-07 | Add 'reply-to' to filter rules, similar to route-to, but applying to | Daniel Hartmeier |
2002-10-05 | Allow filtering based on IP header's tos field. | Daniel Hartmeier |
2002-08-12 | Use state tree instead of separate (flat) list to find NAT proxy ports, | Daniel Hartmeier |
2002-07-15 | add u_int8_t ifnot to struct pf_rule to support matching packets on any | Henning Brauer |
2002-06-11 | split the grammar of scrub(fragcache) into scrub ... 'fragment reassemble', | Mike Frantzen |
2002-06-11 | enumerate UDP and OTHER state levels (similar to tcp_fsm.h) | Mike Frantzen |