| Age | Commit message (Expand) | Author |
|---|
| 2007-01-18 | allow kernels with TCP_SIGNATURE (aka tcp md5sig), but without IPSEC to | Henning Brauer |
| 2007-01-08 | add round brackets around return values | Michele Marchetto |
| 2007-01-08 | discard packet and return if ifp is not a member of the bridge | Michele Marchetto |
| 2006-12-29 | Add IFM_ETH_FMASK. From NetBSD. | Mark Kettenis |
| 2006-12-28 | knf, from bred@ | Todd T. Fries |
| 2006-12-28 | check if ifqueue has anything queued before doing the dance of | Theo de Raadt |
| 2006-12-27 | Add IFM_ETH_RXPAUSE and IFM_ETH_TXPAUSE. From NetBSD. | Mark Kettenis |
| 2006-12-22 | add special handling for "urpf-failed" with carp interfaces. the | Reyk Floeter |
| 2006-12-21 | in pf_route(), initialize ro to NULL at the beginning. if left un- | Daniel Hartmeier |
| 2006-12-15 | make pflog(4) count; ok hennig@ deraadt@ | Otto Moerbeek |
| 2006-12-14 | in "BAD/loose state" messages, also print the packet's original sequence | Daniel Hartmeier |
| 2006-12-13 | wrap ipv6 portion with #ifdef INET6. from cmetz | Jun-ichiro itojun Hagino |
| 2006-12-13 | use IN6_IS_SCOPE_EMBED to check kernel-internal form addresses | Jun-ichiro itojun Hagino |
| 2006-12-13 | IPv6 passive OS fingerprinting. | Jun-ichiro itojun Hagino |
| 2006-12-12 | ansify the enc code | Reyk Floeter |
| 2006-12-11 | refer to the RSTP point to point option as "PTP" instead of "P2P". | Reyk Floeter |
| 2006-12-07 | use LINK_STATE_IS_UP(ifp0->if_link_state) instead of | Reyk Floeter |
| 2006-12-06 | Missing newline in printf. | Bernd Ahlers |
| 2006-12-03 | Add Rapid Spanning Tree Protocol support (802.1d-2004) based on work | Reyk Floeter |
| 2006-11-30 | no need for #if NPF > 0 inside #if NPF > 0 | Henning Brauer |
| 2006-11-28 | add additional link states to report the half duplex / full duplex | Reyk Floeter |
| 2006-11-24 | Check the reference count for interface addresses when detaching | Can Erkin Acar |
| 2006-11-24 | add support to tag ipsec traffic belonging to specific IKE-initiated | Reyk Floeter |
| 2006-11-24 | never call an ioctl without process context! this diffs checks the | Reyk Floeter |
| 2006-11-20 | ioctl to explicitly remove source tracking nodes, | Ryan Thomas McBride |
| 2006-11-16 | conditional for appending the pf mbuf tag in pf_test/pf_test6 was wrong, | Henning Brauer |
| 2006-11-16 | no need to always attach pfsync0 any more. ok mpf mcbride | Henning Brauer |
| 2006-11-16 | introduce if_creategroup() to create an empty interface group. | Henning Brauer |
| 2006-11-16 | knf | Jun-ichiro itojun Hagino |
| 2006-11-10 | Fix an mbuf leak in an error path. OK brad@ | Claudio Jeker |
| 2006-11-01 | Attach pfsync0 and pflog0 by default like they used to, /etc/rc depends on | Ryan Thomas McBride |
| 2006-11-01 | poll errors should be POLLERR, not some random E value | Ted Unangst |
| 2006-11-01 | remove redundant null check, ok ryan | Henning Brauer |
| 2006-10-31 | slightly improve consustency and readability, no functional change | Henning Brauer |
| 2006-10-31 | in pfsync_update_tdb, when there is no pfsync interface, we must return | Henning Brauer |
| 2006-10-31 | hard to believe people still manage to commit non-compiling code once in a while | Theo de Raadt |
| 2006-10-31 | make pfsync a clonable too, but prevent more than one instance from | Henning Brauer |
| 2006-10-31 | ether_input_mbuf() isn't necessary, turn it into a macro and deal with | Jason Wright |
| 2006-10-28 | Fix handling of errors wrt to MINDEX. From NetBSD bpf_filter 1.32; | Otto Moerbeek |
| 2006-10-27 | Split ruleset manipulation functions out into pf_ruleset.c to allow them to | Ryan Thomas McBride |
| 2006-10-25 | allow up to 16 pflog interfaces, ok mcbride | Henning Brauer |
| 2006-10-25 | add a "u_int8_t logif" to struct pfrule to select to which pflog interface | Henning Brauer |
| 2006-10-23 | make the pflog interface clonable. | Henning Brauer |
| 2006-10-21 | the create and destroy functions for clonable interfaces return 0 on | Henning Brauer |
| 2006-10-17 | increase max pf tag name size from 16 to 64 characters. | Reyk Floeter |
| 2006-10-11 | Allow the 'quick' keyword on an anchor. IFF there is a matching rule inside | Ryan Thomas McBride |
| 2006-09-26 | Fix compilation, okay henning@ mpf@ | Pedro Martelletto |
| 2006-09-18 | allow RST from TCP client, even if client does not send data after SYN; | Markus Friedl |
| 2006-09-18 | fix tos (type-of-service) comparisons. for rules which use 'tos x', compare | Daniel Hartmeier |
| 2006-08-30 | allow DIOCNATLOOK to look up NAT states for protocols without port | Damien Miller |
