| Age | Commit message (Expand) | Author |
|---|
| 2009-11-26 | magical fix for a fault which reliably brings my firewalls down. i think | David Gwynne |
| 2009-11-24 | kill obsolete natpass | Henning Brauer |
| 2009-11-23 | with the old code we initialized the state keys early in some cases | Henning Brauer |
| 2009-11-23 | one kinda-missing log |= PFLOG_FORCE in the v6 case, spotted by claudio | Henning Brauer |
| 2009-11-23 | sync the handling of the log flag from pf_test (where it is correct) | Henning Brauer |
| 2009-11-23 | pf_test_fragment: we need to bail out if action == PF_DROP, not | Henning Brauer |
| 2009-11-23 | sync some comments with reality | Henning Brauer |
| 2009-11-23 | remove the nat_rule pointer on pf_state and pf_pdesc, obsolete after | Henning Brauer |
| 2009-11-22 | cleanup after the NAT changes. we used to have multiple rulesets (scrub, | Henning Brauer |
| 2009-11-22 | Add a lot of bpf and counter manipulation to the bridge. The bridge | Theo de Raadt |
| 2009-11-21 | knf | Henning Brauer |
| 2009-11-21 | Add a way to bind the tunnel endpoint of a gif/gre interface into a | Claudio Jeker |
| 2009-11-18 | improve the bpf path. packets we send out via the bridge are seen, but | Theo de Raadt |
| 2009-11-18 | set IFCAP_VLAN_MTU; from brad | Theo de Raadt |
| 2009-11-18 | do not do setup that ether_ifattach() takes care of; ok jsg | Theo de Raadt |
| 2009-11-13 | Extend the protosw pr_ctlinput function to include the rdomain. This is | Claudio Jeker |
| 2009-11-12 | be paranoid in case the action array changes size (again, grr) | Theo de Raadt |
| 2009-11-12 | count packets; from claudio | Theo de Raadt |
| 2009-11-11 | Fix some memory leaks in error cases. | Jonathan Gray |
| 2009-11-09 | bump pfsync protocol version | David Gwynne |
| 2009-11-09 | s/MPLS_DEBUG/VETHER_DEBUG | Marco Pfatschbacher |
| 2009-11-09 | Every selwakeup() should have a matching KNOTE() (even if kqueue isn't | Nicholas Marriott |
| 2009-11-09 | vether(4) is a virtual ethernet device driver which can be used | Theo de Raadt |
| 2009-11-05 | IPv6 support for divert sockets. | Michele Marchetto |
| 2009-11-03 | Use u_int16_t for rdomains for everything. Using various types makes | Claudio Jeker |
| 2009-11-03 | rtables are stacked on rdomains (it is possible to have multiple routing | Claudio Jeker |
| 2009-11-02 | s/hz/Hz/ on multiples of the SI unit hertz other than MHz. | Igor Sobrado |
| 2009-10-29 | I missed updating a line for the AF_INET6 route case when | Jonathan Gray |
| 2009-10-28 | Add a dedicated pf pool for route options as suggested by henning, | Jonathan Gray |
| 2009-10-26 | Set the rdomain in bpfwrite() to the interface rdomain so that bpf sender | Claudio Jeker |
| 2009-10-26 | Replace pool_get() + bzero() with pool_get(..., PR_ZERO). | Michael Knudsen |
| 2009-10-10 | fix mbuf leak in rtinit() | Dariusz Swiderski |
| 2009-10-06 | Redo the route lookup in the output (and IPv6 forwarding) path if the | Claudio Jeker |
| 2009-10-06 | Replace if (af) tests operating as an af blacklist with stricter switch | Ryan Thomas McBride |
| 2009-10-04 | Add (again) support for divert sockets. They allow you to: | Michele Marchetto |
| 2009-09-28 | when inserting a state, turn the error that pf_state_insert returns | David Gwynne |
| 2009-09-21 | Properly reference count bpf descriptors when using kqueue. | Can Erkin Acar |
| 2009-09-17 | Remove the comaptibility structures for routing socket version 3. | Claudio Jeker |
| 2009-09-17 | Wrap trunk_enqueue() calls in splnet() since sending out lacp packets | Claudio Jeker |
| 2009-09-17 | Add an splassert check trunk_enqueue() calling this function at anything | Claudio Jeker |
| 2009-09-16 | style: in pf_test_state_other, fix indentation, kill excessive newlines, | Henning Brauer |
| 2009-09-16 | fix copy & paste error from almost a year ago (bad ryan) | Henning Brauer |
| 2009-09-14 | Add a way to convert the ifi_link_state to a string without the use of | Claudio Jeker |
| 2009-09-09 | remove inline functions and move some code from the trunk_lacp_input() | Reyk Floeter |
| 2009-09-08 | I had not enough oks to commit this diff. | Michele Marchetto |
| 2009-09-08 | Add support for divert sockets. They allow you to: | Michele Marchetto |
| 2009-09-07 | de-inline a function which gains absolutely no benefit at all from it | Theo de Raadt |
| 2009-09-07 | Fix static-port, found by jmc@. ok henning@. | Stuart Henderson |
| 2009-09-01 | Clear the IP_DF bit if no-df is enabled, not if it is not enabled. | Joel Sing |
| 2009-09-01 | the diff theo calls me insanae for: | Henning Brauer |
