| Age | Commit message (Expand) | Author |
|---|
| 2015-08-19 | PF must keep IPv6 fragment size as chosen by sender also for packets, | Alexandr Nedvedicky |
| 2015-07-20 | INET6 is here to stay, so stop hauling around never-compiled code | Ryan Thomas McBride |
| 2015-07-19 | unused arguments at pf_normalize_tcp_init() and pf_refragment6() | sashan |
| 2015-07-17 | sa_family_t should not be confused with u_int8_t | sashan |
| 2015-07-16 | Kill IP_ROUTETOETHER. | Martin Pieuchot |
| 2015-06-05 | Improve error handling and recovery during state insertion | Mike Belopuhov |
| 2015-04-11 | the hfsc pools are only used in hfsc.c, so move the init of them | David Gwynne |
| 2015-02-15 | Rather than using 0xff as a placeholder for "don't check prio", use 0xff to | Stuart Henderson |
| 2015-02-12 | change log(matches) semantics slightly to make it more useful. since it | Henning Brauer |
| 2015-02-10 | include the "set prio" values. | Henning Brauer |
| 2015-02-10 | since we inherit prio (as in, the queuing priority) from outside sources, | Henning Brauer |
| 2015-02-07 | make RB_PROTOTYPE usage ISO C compliant by removing useless semicolons | Martin Pelikan |
| 2015-01-24 | Userland (base & ports) was adapted to always include <netinet/in.h> | Theo de Raadt |
| 2015-01-15 | Stop including <sys/param.h> and other stuff. Assume this will be included | Theo de Raadt |
| 2014-12-23 | unifdef some more INET. v4 4life. | Ted Unangst |
| 2014-12-19 | Support source-hash and random with tables and dynifs; not just pools. | Reyk Floeter |
| 2014-12-19 | add messages to #error so we know what's what (and so unifdef doesn't poop) | Ted Unangst |
| 2014-09-08 | When logging a packet to a listener on the pflog0 interface, the | Alexander Bluhm |
| 2014-08-12 | Finally implement what's stated in the man page regarding parent | Mike Belopuhov |
| 2014-07-02 | better indentation | Mike Belopuhov |
| 2014-06-25 | pf_translate doesn't use the mbuf argument anymore. | Mike Belopuhov |
| 2014-04-22 | Remove some altq tentacles. | Martin Pieuchot |
| 2014-04-19 | shrink pf by 445 lines. | Henning Brauer |
| 2014-01-21 | introduce a way to match "any" interface, excluding loopback ones. | Henning Brauer |
| 2014-01-20 | support negated matches on the rcvif, ok dlg benno | Henning Brauer |
| 2014-01-03 | Switch frequently allocated structs from malloc(M_DEVBUF) to separate pools. | pelikan |
| 2014-01-03 | Make queues disappear correctly on interfaces being destroyed. | pelikan |
| 2013-12-22 | change pf_osfp_entry strings to unsigned, to help userland | Theo de Raadt |
| 2013-11-19 | provide forward declarations for structures ifnet and ifg_group; | Mike Belopuhov |
| 2013-10-12 | new bandwidth shaping subsystem, kernel side | Henning Brauer |
| 2013-10-12 | give tagname2tag and its siblings an extra "create" parameter. if 1, it | Henning Brauer |
| 2013-07-23 | Do not reset the fragment timeout each time a fragment arrives. | Alexander Bluhm |
| 2013-07-05 | Collect and display 'match' counters for pf tables. | Bret Lambert |
| 2013-07-04 | Re-commit: use time_t for storing time_t values. This is an ABI | Philip Guenther |
| 2013-07-02 | Revert previous: sizeof(time_t) != sizeof(long) on LP64, so there was | Philip Guenther |
| 2013-07-02 | Use time_t for storing time_t values. No change to the underlying | Philip Guenther |
| 2013-06-26 | put the cksum diff back, of course with the bug fixed where we could | Henning Brauer |
| 2013-06-04 | add a pointer to the protocol checksum header field to pf_pdesc and set | Henning Brauer |
| 2013-06-03 | put back the match member to the anchor stack struct - userland (pfctl) | Henning Brauer |
| 2013-06-03 | fix anchor quick with nested anchors. we lost the quick flag as soon as | Henning Brauer |
| 2013-06-01 | pf_step_{into,out_of}_anchor() are only ever called from pf_test_rule() | Henning Brauer |
| 2013-05-10 | Since pf_state_key_attach can decide to free the provided state | Mike Belopuhov |
| 2013-05-03 | Export ingress/egress interface index in pflow(4). | Florian Obser |
| 2013-03-11 | Add a separate "translation" counter and use this rather than "memory" | Stuart Henderson |
| 2013-01-17 | first or second coming, commie or not commie, one m in coming is sufficient | Henning Brauer |
| 2012-12-29 | pass pf_pool directly to pfr_pool_get(); simplifies the API; | Markus Friedl |
| 2012-11-06 | backout csum diff for the moment, requested by theo | Henning Brauer |
| 2012-11-01 | redo most of the protocol (tcp/udp/...) checksum handling | Henning Brauer |
| 2012-10-30 | Use time_uptime for expiration values as time_second can be skewed at | Florian Obser |
| 2012-10-08 | Forward declare struct m_tag in netinet/ip_ipsp.h so we don't need to | Camiel Dobbelaar |
