Age | Commit message (Expand) | Author |
2003-09-26 | Rearchitecture of the userland/kernel IOCTL interface for transactions. | Cedric Berger |
2003-09-26 | Move statistics counters from individual pf_test_<proto>() and | Ryan Thomas McBride |
2003-09-24 | Remove state setup no-ops. | Ryan Thomas McBride |
2003-09-23 | Replace select backends with poll backends. selscan() and pollscan() | Todd C. Miller |
2003-09-21 | sync with netbsd defines. no functional changes. | Federico G. Schwindt |
2003-09-18 | comment spelling, from jonathon gray | Ted Unangst |
2003-09-01 | KNF | Henning Brauer |
2003-09-01 | Make nat rule update the table counters when no filtering rule is used. | Cedric Berger |
2003-08-29 | Fix three cases of potential accesses to free'd memory. At least one of | Daniel Hartmeier |
2003-08-28 | fix "pfctl -vvsr" output for rules with tables inside anchors. | Cedric Berger |
2003-08-27 | fix inconsistency how we handle tcpopt EOL versus how p0f v2 handles it | Mike Frantzen |
2003-08-27 | it is supprisingly common (>4%) for some NAT and DSL routers to tweak MSS | Mike Frantzen |
2003-08-27 | RNF_IGNORE can corrupt the radix tree when an interface is down, it | Henric Jungheim |
2003-08-27 | cut-and-paste error; henric | Jun-ichiro itojun Hagino |
2003-08-26 | mark cloned route with RTF_CLONED. remove RTF_CLONED route when clone parent | Jun-ichiro itojun Hagino |
2003-08-25 | if_init support, required by ieee80211. | Federico G. Schwindt |
2003-08-25 | add DLT_IEEE802_11; deraadt@ ok. | Federico G. Schwindt |
2003-08-24 | defines and struct for the ieee80211 framework; deraadt@ ok. | Federico G. Schwindt |
2003-08-22 | pf spelling police | David Krause |
2003-08-22 | KNF | Henning Brauer |
2003-08-22 | don't expose pf_osfp_fingerprint() to ! _KERNEL. tcpdump et al use | Mike Frantzen |
2003-08-21 | Add Michal Zalewski's p0f v2 style passive OS fingerprinting to PF. | Mike Frantzen |
2003-08-18 | prevent looutput() feedback of broadcast/multicast packets if they are | Daniel Hartmeier |
2003-08-17 | Missing break, change NULL -> 0 for int parameter (no functional | Daniel Hartmeier |
2003-08-15 | change arguments to suser. suser now takes the process, and a flags | Ted Unangst |
2003-08-14 | m_copyback()'s 4th arg is const void *, nuke (caddr_t) casts. | Jason Wright |
2003-08-11 | Fix DIOCCHANGEADDR, use the supplied ticket instead of 0. | Daniel Hartmeier |
2003-08-09 | This patch remove the restriction that tables cannot be used in routing or | Cedric Berger |
2003-08-07 | make pf_match take u_int32_t instead of u_int16_t | Henning Brauer |
2003-07-31 | Make table tickets per-ruleset instead of global. | Cedric Berger |
2003-07-29 | avoid stack smash on FDDI case. found by kernel propolice. | Jun-ichiro itojun Hagino |
2003-07-29 | Set pf_state->rt_ifp when creating the state entry, instead of doing it | Daniel Hartmeier |
2003-07-29 | More aggressive and easier to understand skip steps for addresses. | Cedric Berger |
2003-07-28 | typo. from cedric | Jun-ichiro itojun Hagino |
2003-07-25 | do not flip ip_len/ip_off. pechkin and henning ok | Jun-ichiro itojun Hagino |
2003-07-25 | %lu for u_long arg | Jason Wright |
2003-07-24 | conform to RFC2367 on SADB_xx naming (local name must be prefixed with | Jun-ichiro itojun Hagino |
2003-07-24 | hmac-sha2-{256,384,512} support in AH/ESP auth. markus ok | Jun-ichiro itojun Hagino |
2003-07-23 | remove packets in queues (like ipintrq) with m->m_pkthdr.rcvif pointing | Jun-ichiro itojun Hagino |
2003-07-19 | Simplify struct pf_pooladdr to include struct pf_addr_wrap directly | Cedric Berger |
2003-07-18 | add missing includes | David Krause |
2003-07-17 | fix scrub frag reassembly after the stack's ip_len/ip_off flip correction | Mike Frantzen |
2003-07-15 | Adjust pflog after recent byte order changes, fixes the 'truncated-ip' | Daniel Hartmeier |
2003-07-15 | no named args in prototypes | Jason Wright |
2003-07-12 | Remove two htons(), which were meant as ntohs(), and are wrong since | Daniel Hartmeier |
2003-07-12 | Prevent u_int16_t variable from overflowing and get rid of the compiler | Daniel Hartmeier |
2003-07-10 | correct another incorrect comparison in ip6 normalization. | Jun-ichiro itojun Hagino |
2003-07-10 | wrong comparison of IPv6 packetsize | Jun-ichiro itojun Hagino |
2003-07-09 | check if m->m_pkthdr.len is too short | Jun-ichiro itojun Hagino |
2003-07-09 | don't check exact ip6_plen and m->m_pkthdr.len match, as ip6_input() | Jun-ichiro itojun Hagino |