| Age | Commit message (Expand) | Author |
|---|
| 2002-12-10 | renumber the get/set debug ioctls for they conflict w/ ppp, we do not keep th... | Michael Shalayeff |
| 2002-12-10 | check IFF_RUNNING early in bstp_transmit_tcn; from netbsd; ok jason@ | Markus Friedl |
| 2002-12-09 | NPF, not NFP (prevented outgoing bridge_ipsec() packets from being filtered);... | Jason Wright |
| 2002-12-09 | knf | Theo de Raadt |
| 2002-12-09 | allow setting of ifcost with brconfig. enables selection of preferred | Markus Friedl |
| 2002-12-06 | Replace license with something that's actually free. | Nathan Binkert |
| 2002-12-06 | Introduce anchors and named rule sets, allowing to load additional rule | Daniel Hartmeier |
| 2002-12-04 | spanning tree: flush dynamic mac cache if interface goes to the | Markus Friedl |
| 2002-12-03 | no need to mh_align (while it's wrong), cleaner mtu setting; dhartmei@ ok | Michael Shalayeff |
| 2002-12-01 | KNF | Henning Brauer |
| 2002-12-01 | - Clean up pf_ioctl mainly by adding new functions to handle cleaning and | Ryan Thomas McBride |
| 2002-12-01 | pfsync currently causes kernel faults, so we don't want to call these functions | Ryan Thomas McBride |
| 2002-11-29 | minor KNF | Henning Brauer |
| 2002-11-29 | expose state table changes | Michael Shalayeff |
| 2002-11-29 | Get the address pool in DIOCCHANGEADDR for all operations, prevents | Ryan Thomas McBride |
| 2002-11-28 | - MD5 too slow, replace with pf_hash (based on hash from if_bridge.c) | Ryan Thomas McBride |
| 2002-11-26 | Call the enable function, don't set the variable directly. | Jason Wright |
| 2002-11-26 | pass struct pfioc_changeaddr to DIOCCHANGEADDR | Ryan Thomas McBride |
| 2002-11-26 | 1000baseTX -> 1000baseT | Nathan Binkert |
| 2002-11-26 | fix "pfctl -Fq". | Kenjiro Cho |
| 2002-11-24 | move } outside #ifdef INET6 | Ryan Thomas McBride |
| 2002-11-23 | KNF | Theo de Raadt |
| 2002-11-23 | pass a pointer to the hash, not the first chunk of it | Ryan Thomas McBride |
| 2002-11-23 | kernel code to allow multiple redirection addresses to be specified for nat | Ryan Thomas McBride |
| 2002-11-22 | on block rules, let queue apply to the RST packets in the return-rst case | Henning Brauer |
| 2002-11-20 | KNF | Theo de Raadt |
| 2002-11-12 | Missing splx. | Mike Pechkin |
| 2002-11-07 | Short-circuit evaluation can leave invalid pointers, closes PR2874. | Daniel Hartmeier |
| 2002-11-02 | Compare dynamic addresses correctly in pf_compare_*: check the interface name | Ryan Thomas McBride |
| 2002-11-02 | Make PF_ANEQ(), PF_ANEQ() and PF_AZERO() check the whole address if af | Ryan Thomas McBride |
| 2002-10-29 | keep all pflog goodies in pflog sources, avoids code duplications; okski fran... | Michael Shalayeff |
| 2002-10-25 | Compare pf_rule->label in pf_compare_rules(), too. | Daniel Hartmeier |
| 2002-10-22 | Convert "int af" and "u_int8_t af" declarations and function arguments | Ryan Thomas McBride |
| 2002-10-22 | check the correct return value from ifunit() | Ryan Thomas McBride |
| 2002-10-20 | Move pf_compare_(rules|nats|binats|rdrs) to pf_ioctl.c. Simplifies and | Ryan Thomas McBride |
| 2002-10-14 | Allow one to specify a netblock in a binat rule: | Henning Brauer |
| 2002-10-10 | Missing m_pullup() and mbuf corruption. This potentially caused | Daniel Hartmeier |
| 2002-10-10 | padd pf_state; dhartmei@ ok | Michael Shalayeff |
| 2002-10-08 | the first step of pf/altq merge. | Kenjiro Cho |
| 2002-10-07 | -Wsign-compare clean | Daniel Hartmeier |
| 2002-10-07 | set block-policy [drop|return] | Henning Brauer |
| 2002-10-07 | support a generic return | Henning Brauer |
| 2002-10-07 | make return-icmp work for rules covering both v4 and v6 | Henning Brauer |
| 2002-10-07 | use a new rule_flag PFRULE_RETURNICMP to decide wether to return-icmp or not | Henning Brauer |
| 2002-10-07 | Add 'reply-to' to filter rules, similar to route-to, but applying to | Daniel Hartmeier |
| 2002-10-05 | Allow filtering based on IP header's tos field. | Daniel Hartmeier |
| 2002-10-04 | [to the right branch this time] | Jason Ish |
| 2002-09-27 | daddr was used where saddr was meant while checking incoming packets for | Henning Brauer |
| 2002-09-26 | BSD-style license from Serge Vakulenko <vak@cronyx.ru> | Chris Cappuccio |
| 2002-09-24 | sizeof(structure) not sizeof(structure *); pointed out by dvamsi@yahoo.com. | Jason Wright |
