| Age | Commit message (Expand) | Author |
|---|
| 2014-07-02 | better indentation | Mike Belopuhov |
| 2014-06-25 | pf_translate doesn't use the mbuf argument anymore. | Mike Belopuhov |
| 2014-04-22 | Remove some altq tentacles. | Martin Pieuchot |
| 2014-04-19 | shrink pf by 445 lines. | Henning Brauer |
| 2014-01-21 | introduce a way to match "any" interface, excluding loopback ones. | Henning Brauer |
| 2014-01-20 | support negated matches on the rcvif, ok dlg benno | Henning Brauer |
| 2014-01-03 | Switch frequently allocated structs from malloc(M_DEVBUF) to separate pools. | pelikan |
| 2014-01-03 | Make queues disappear correctly on interfaces being destroyed. | pelikan |
| 2013-12-22 | change pf_osfp_entry strings to unsigned, to help userland | Theo de Raadt |
| 2013-11-19 | provide forward declarations for structures ifnet and ifg_group; | Mike Belopuhov |
| 2013-10-12 | new bandwidth shaping subsystem, kernel side | Henning Brauer |
| 2013-10-12 | give tagname2tag and its siblings an extra "create" parameter. if 1, it | Henning Brauer |
| 2013-07-23 | Do not reset the fragment timeout each time a fragment arrives. | Alexander Bluhm |
| 2013-07-05 | Collect and display 'match' counters for pf tables. | Bret Lambert |
| 2013-07-04 | Re-commit: use time_t for storing time_t values. This is an ABI | Philip Guenther |
| 2013-07-02 | Revert previous: sizeof(time_t) != sizeof(long) on LP64, so there was | Philip Guenther |
| 2013-07-02 | Use time_t for storing time_t values. No change to the underlying | Philip Guenther |
| 2013-06-26 | put the cksum diff back, of course with the bug fixed where we could | Henning Brauer |
| 2013-06-04 | add a pointer to the protocol checksum header field to pf_pdesc and set | Henning Brauer |
| 2013-06-03 | put back the match member to the anchor stack struct - userland (pfctl) | Henning Brauer |
| 2013-06-03 | fix anchor quick with nested anchors. we lost the quick flag as soon as | Henning Brauer |
| 2013-06-01 | pf_step_{into,out_of}_anchor() are only ever called from pf_test_rule() | Henning Brauer |
| 2013-05-10 | Since pf_state_key_attach can decide to free the provided state | Mike Belopuhov |
| 2013-05-03 | Export ingress/egress interface index in pflow(4). | Florian Obser |
| 2013-03-11 | Add a separate "translation" counter and use this rather than "memory" | Stuart Henderson |
| 2013-01-17 | first or second coming, commie or not commie, one m in coming is sufficient | Henning Brauer |
| 2012-12-29 | pass pf_pool directly to pfr_pool_get(); simplifies the API; | Markus Friedl |
| 2012-11-06 | backout csum diff for the moment, requested by theo | Henning Brauer |
| 2012-11-01 | redo most of the protocol (tcp/udp/...) checksum handling | Henning Brauer |
| 2012-10-30 | Use time_uptime for expiration values as time_second can be skewed at | Florian Obser |
| 2012-10-08 | Forward declare struct m_tag in netinet/ip_ipsp.h so we don't need to | Camiel Dobbelaar |
| 2012-10-05 | include sys/mbuf.h | Camiel Dobbelaar |
| 2012-09-20 | Lower pf frags limit to not risk running out of mbuf clusters | Camiel Dobbelaar |
| 2012-09-18 | prio 0 is valid, therefore, I chose an "impossible" value for prio meaning | Henning Brauer |
| 2012-07-26 | rename all_state_flags to state_flags to finish the transition | Mike Belopuhov |
| 2012-07-13 | remove confuzzling comment | Henning Brauer |
| 2012-07-10 | define a PFSTATE_SCRUBMASK. relying on numeric order of flags is stupid | Henning Brauer |
| 2012-07-07 | rename prio in struct pf_rule and related structs to set_prio so it is | Henning Brauer |
| 2012-04-03 | Fix kernel compilation with pf but without pfsync pseudo-device by | Mike Belopuhov |
| 2012-02-03 | The kernel did not compile without INET6. Put some #ifdefs into | Alexander Bluhm |
| 2012-01-26 | Clean up the pf normalization code: | Alexander Bluhm |
| 2012-01-16 | Pass struct pf_pdesc to pf_walk_option6() and pf_walk_header6() to | Alexander Bluhm |
| 2012-01-15 | Calling pf_normalize_ip() from pf_setup_pdesc() was bad as the | Alexander Bluhm |
| 2011-12-12 | fixup af-to regression with match rules | Mike Belopuhov |
| 2011-11-29 | use a u_int64_t for the state id in pfsync_state. this makes it consistent | David Gwynne |
| 2011-11-28 | deprecate PFTM_UNTIL_PACKET. nothing in the tree uses it, and | David Gwynne |
| 2011-11-26 | Apply route-to to deferred packet; without this the first packet of a | Ryan Thomas McBride |
| 2011-10-13 | Since the IPv6 madness is not enough introduce NAT64 -- which is actually | Claudio Jeker |
| 2011-10-07 | rename some vars and functions | Henning Brauer |
| 2011-10-07 | pf_poolqueue is long dead, remove corpses. from eurobsdcon, ryan ok | Henning Brauer |
