Age | Commit message (Expand) | Author |
2003-08-07 | make pf_match take u_int32_t instead of u_int16_t | Henning Brauer |
2003-07-31 | Make table tickets per-ruleset instead of global. | Cedric Berger |
2003-07-29 | avoid stack smash on FDDI case. found by kernel propolice. | Jun-ichiro itojun Hagino |
2003-07-29 | Set pf_state->rt_ifp when creating the state entry, instead of doing it | Daniel Hartmeier |
2003-07-29 | More aggressive and easier to understand skip steps for addresses. | Cedric Berger |
2003-07-28 | typo. from cedric | Jun-ichiro itojun Hagino |
2003-07-25 | do not flip ip_len/ip_off. pechkin and henning ok | Jun-ichiro itojun Hagino |
2003-07-25 | %lu for u_long arg | Jason Wright |
2003-07-24 | conform to RFC2367 on SADB_xx naming (local name must be prefixed with | Jun-ichiro itojun Hagino |
2003-07-24 | hmac-sha2-{256,384,512} support in AH/ESP auth. markus ok | Jun-ichiro itojun Hagino |
2003-07-23 | remove packets in queues (like ipintrq) with m->m_pkthdr.rcvif pointing | Jun-ichiro itojun Hagino |
2003-07-19 | Simplify struct pf_pooladdr to include struct pf_addr_wrap directly | Cedric Berger |
2003-07-18 | add missing includes | David Krause |
2003-07-17 | fix scrub frag reassembly after the stack's ip_len/ip_off flip correction | Mike Frantzen |
2003-07-15 | Adjust pflog after recent byte order changes, fixes the 'truncated-ip' | Daniel Hartmeier |
2003-07-15 | no named args in prototypes | Jason Wright |
2003-07-12 | Remove two htons(), which were meant as ntohs(), and are wrong since | Daniel Hartmeier |
2003-07-12 | Prevent u_int16_t variable from overflowing and get rid of the compiler | Daniel Hartmeier |
2003-07-10 | correct another incorrect comparison in ip6 normalization. | Jun-ichiro itojun Hagino |
2003-07-10 | wrong comparison of IPv6 packetsize | Jun-ichiro itojun Hagino |
2003-07-09 | check if m->m_pkthdr.len is too short | Jun-ichiro itojun Hagino |
2003-07-09 | don't check exact ip6_plen and m->m_pkthdr.len match, as ip6_input() | Jun-ichiro itojun Hagino |
2003-07-09 | do not flip ip_len/ip_off in netinet stack. deraadt ok. | Jun-ichiro itojun Hagino |
2003-07-09 | KNF | Daniel Hartmeier |
2003-07-05 | backout 1.29; problem reported by Rukh w/ userland ppp. | Jun-ichiro itojun Hagino |
2003-07-04 | cosmetic changes to keep the different code paths in sync; ok henning | Markus Friedl |
2003-07-04 | -add a "natpass" field to pf_rule | Henning Brauer |
2003-07-04 | bad redundant copy; ok daniel | Markus Friedl |
2003-07-03 | unused global. dhartmei ok | Jun-ichiro itojun Hagino |
2003-07-01 | wrap pf_normalize_ip6() by #ifdef INET6. pointed out by Wouter Clarie | Jun-ichiro itojun Hagino |
2003-06-30 | change that queue ID allocator so it always has the queues sorted by ID. | Henning Brauer |
2003-06-30 | reset interface statistics when loginterface is changed, closes pr3332, | Daniel Hartmeier |
2003-06-30 | missing pf_tag_purge() | Henning Brauer |
2003-06-30 | move prototype for pf_tag_purge() to pfvar.h | Henning Brauer |
2003-06-29 | normalize IPv6 packet (no reass, but it is a start). dhartmei & henning ok | Jun-ichiro itojun Hagino |
2003-06-29 | unused global. dhartmei ok | Jun-ichiro itojun Hagino |
2003-06-28 | redundant (pfvar.h already have it) | Jun-ichiro itojun Hagino |
2003-06-28 | remove duplicated prototype (they are in pfvar.h). dhartmei ok | Jun-ichiro itojun Hagino |
2003-06-27 | protos for userland build | Theo de Raadt |
2003-06-27 | do pf_tagname2tag() in DIOCCHANGERULE as well. | Henning Brauer |
2003-06-27 | move down pf_tag_unref() calls in pf_rm_rule() to after the check wetehr there | Henning Brauer |
2003-06-25 | add a pf_tagname field to ifbrlreq and a pf_tag field to ifbrlnode. | Henning Brauer |
2003-06-24 | in the ipv6 case, allow route-to to route to link-local addresses | Henning Brauer |
2003-06-24 | KNF | Henning Brauer |
2003-06-24 | recover code that requires exact match on rtm_change/lock (lost in netbsd 1.16). | Jun-ichiro itojun Hagino |
2003-06-23 | Don't remove anchor too early in table code, it makes PF use freed memory. | Cedric Berger |
2003-06-21 | count packets and bidirectionally on state entries, allowing for fine-grained | Damien Miller |
2003-06-20 | Add MSS support to the synproxy. The client's MSS is sent to the server, | Daniel Hartmeier |
2003-06-20 | Extend 'BAD ICMP' debug message, include icmp type/code and outer IP header | Daniel Hartmeier |
2003-06-18 | Do not panic on no memory available when allocating bufs, pass ENOBUFS | Henning Brauer |