Age | Commit message (Expand) | Author |
2003-10-29 | fix binat for incoming connections when a netblock (not just a single | Daniel Hartmeier |
2003-10-25 | Build state search indexes directly on pf_state instead of pf_tree_node. | Ryan Thomas McBride |
2003-10-25 | "goto bad" on error with carp_input, instead of simply returning. | Ryan Thomas McBride |
2003-10-24 | Fix write filter blocking when no filter was set. Fixes | Can Erkin Acar |
2003-10-22 | Add locking and write filtering to bpf descriptors. | Can Erkin Acar |
2003-10-20 | tyop | Jason Wright |
2003-10-19 | Add missing "#ifdef ALTQ"'s in the ioctl transacions code. | Ryan Thomas McBride |
2003-10-19 | more typos | David Krause |
2003-10-17 | Common Address Redundancy Protocol | Ryan Thomas McBride |
2003-10-10 | make sure pd is initialized before use (or byte counters may increase | Daniel Hartmeier |
2003-10-08 | obviously i'm on drugs, revert | Henning Brauer |
2003-10-08 | missing DIOCX* in the securelevel > 1 case | Henning Brauer |
2003-10-04 | bpf support for atm cards; from jason@ackley.net | Theo de Raadt |
2003-10-02 | do not try to send incomplete fragments on ENOBUFS case | Jun-ichiro itojun Hagino |
2003-10-02 | correct endian handling of ip->ip_off. | Jun-ichiro itojun Hagino |
2003-10-01 | Fix stack leak into pfloghdr (the pad field is not initialized), | Can Erkin Acar |
2003-10-01 | make ifindex2ifnet growing code more correct. (found by iij seil team) | Jun-ichiro itojun Hagino |
2003-09-28 | Correct off-by-ones with respect to PRC_NCMDS. Mostly from FreeBSD. | Chad Loder |
2003-09-26 | Rearchitecture of the userland/kernel IOCTL interface for transactions. | Cedric Berger |
2003-09-26 | Move statistics counters from individual pf_test_<proto>() and | Ryan Thomas McBride |
2003-09-24 | Remove state setup no-ops. | Ryan Thomas McBride |
2003-09-23 | Replace select backends with poll backends. selscan() and pollscan() | Todd C. Miller |
2003-09-21 | sync with netbsd defines. no functional changes. | Federico G. Schwindt |
2003-09-18 | comment spelling, from jonathon gray | Ted Unangst |
2003-09-01 | KNF | Henning Brauer |
2003-09-01 | Make nat rule update the table counters when no filtering rule is used. | Cedric Berger |
2003-08-29 | Fix three cases of potential accesses to free'd memory. At least one of | Daniel Hartmeier |
2003-08-28 | fix "pfctl -vvsr" output for rules with tables inside anchors. | Cedric Berger |
2003-08-27 | fix inconsistency how we handle tcpopt EOL versus how p0f v2 handles it | Mike Frantzen |
2003-08-27 | it is supprisingly common (>4%) for some NAT and DSL routers to tweak MSS | Mike Frantzen |
2003-08-27 | RNF_IGNORE can corrupt the radix tree when an interface is down, it | Henric Jungheim |
2003-08-27 | cut-and-paste error; henric | Jun-ichiro itojun Hagino |
2003-08-26 | mark cloned route with RTF_CLONED. remove RTF_CLONED route when clone parent | Jun-ichiro itojun Hagino |
2003-08-25 | if_init support, required by ieee80211. | Federico G. Schwindt |
2003-08-25 | add DLT_IEEE802_11; deraadt@ ok. | Federico G. Schwindt |
2003-08-24 | defines and struct for the ieee80211 framework; deraadt@ ok. | Federico G. Schwindt |
2003-08-22 | pf spelling police | David Krause |
2003-08-22 | KNF | Henning Brauer |
2003-08-22 | don't expose pf_osfp_fingerprint() to ! _KERNEL. tcpdump et al use | Mike Frantzen |
2003-08-21 | Add Michal Zalewski's p0f v2 style passive OS fingerprinting to PF. | Mike Frantzen |
2003-08-18 | prevent looutput() feedback of broadcast/multicast packets if they are | Daniel Hartmeier |
2003-08-17 | Missing break, change NULL -> 0 for int parameter (no functional | Daniel Hartmeier |
2003-08-15 | change arguments to suser. suser now takes the process, and a flags | Ted Unangst |
2003-08-14 | m_copyback()'s 4th arg is const void *, nuke (caddr_t) casts. | Jason Wright |
2003-08-11 | Fix DIOCCHANGEADDR, use the supplied ticket instead of 0. | Daniel Hartmeier |
2003-08-09 | This patch remove the restriction that tables cannot be used in routing or | Cedric Berger |
2003-08-07 | make pf_match take u_int32_t instead of u_int16_t | Henning Brauer |
2003-07-31 | Make table tickets per-ruleset instead of global. | Cedric Berger |
2003-07-29 | avoid stack smash on FDDI case. found by kernel propolice. | Jun-ichiro itojun Hagino |
2003-07-29 | Set pf_state->rt_ifp when creating the state entry, instead of doing it | Daniel Hartmeier |