Age | Commit message (Expand) | Author |
2001-07-09 | do compare in host order. found by millert@. | Daniel Hartmeier |
2001-07-09 | More lame OpenBSD tags. | Federico G. Schwindt |
2001-07-09 | Extend nat/rdr syntax. Add source/destination selection. Make | Daniel Hartmeier |
2001-07-07 | get rid of compiler warning | Marco S Hyman |
2001-07-06 | style change #2, avoid (a == b) == c | Daniel Hartmeier |
2001-07-06 | style change #1, avoid ternary operator | Daniel Hartmeier |
2001-07-06 | theo requests less archaic style | Chris Cappuccio |
2001-07-06 | don't evaluate rules for packets that have state but mismatch seq range (coul... | Daniel Hartmeier |
2001-07-06 | Allow negative match on interface name for nat and rdr | Chris Cappuccio |
2001-07-06 | some cleanup, okay dhartmei@ | Niels Provos |
2001-07-06 | Indentation. | Hakan Olsson |
2001-07-06 | fix userland side prototypes | Theo de Raadt |
2001-07-06 | do not use quad for counters | Theo de Raadt |
2001-07-05 | initalize fragment correctly | Niels Provos |
2001-07-05 | IPComp. angelos@ ok. | Jean-Jacques Bernard-Gundol |
2001-07-05 | $OpenBSD$ tag | Angelos D. Keromytis |
2001-07-05 | KNF | Angelos D. Keromytis |
2001-07-05 | Include files for IPComp support. angelos@ ok. | Jean-Jacques Bernard-Gundol |
2001-07-04 | Make preprocessor happier, don't give it untasty tokens at end of input. | Marc Espie |
2001-07-04 | call ip_output() correctly, use ICMP_MINLEN, only m_copyback() where needed. ... | Daniel Hartmeier |
2001-07-03 | Use PADUP() instead of hand-crafted weirdness; also, it's supposed to | Angelos D. Keromytis |
2001-07-03 | grr, you guys keep not obeying KNF | Theo de Raadt |
2001-07-03 | add DIOCNATLOOK ioctl and pf_natlook structure, this enables a userland | Bob Beck |
2001-07-02 | another memory leak | Niels Provos |
2001-07-02 | fix memory leak | Niels Provos |
2001-07-01 | -Wall | Dug Song |
2001-07-01 | tag packets generated by pf (return-rst, return-icmp) so they are not filtere... | Daniel Hartmeier |
2001-07-01 | Add port ranges to the rdr directive. Connections can be redirected | Kjell Wooding |
2001-07-01 | for ICMP error messages refering to TCP packets, only use the first 8 bytes o... | Daniel Hartmeier |
2001-07-01 | Add missing space in debug message. | Angelos D. Keromytis |
2001-07-01 | Fix length check, add some more sanity checks on INET6. | Angelos D. Keromytis |
2001-07-01 | KNF, and add DPRINTFs all over the place. | Angelos D. Keromytis |
2001-06-29 | Move ifq_maxlen setting to if_attach(). Doing it at if_init() is wrong, | Federico G. Schwindt |
2001-06-29 | Prepend pf_ to limit potential namespace problems, shorten some lines. | Niklas Hallqvist |
2001-06-29 | list instead of tailq for frents, use pool hardlimits, correctly free | Niels Provos |
2001-06-29 | Fix PF_SCRUB enumerator. | Angelos D. Keromytis |
2001-06-29 | fix counter/reason array usage | Daniel Hartmeier |
2001-06-28 | lower hiwat limits, enforce hi water mark | Niels Provos |
2001-06-28 | add tree traversal code (new pf_tree_node->parent), dump states TAILQ and tra... | Daniel Hartmeier |
2001-06-28 | wrap 5-tuple rule match with MATCH_TUPLE. from ben fleis <ben@monkey.org> | Dug Song |
2001-06-28 | forgot to init fr_timeout | Niels Provos |
2001-06-28 | first stab at packet normalization. includes full ip reassembly. | Niels Provos |
2001-06-28 | Disallow filter modification when the system is "highly secure". | Hugh Graham |
2001-06-27 | change pf_tree_key->addr[2] from u_int32_t to struct in_addr for Niels | Daniel Hartmeier |
2001-06-27 | in rdr rules, let port 0 be the port wildcard; ok dhartmei@ | jasoni |
2001-06-27 | change pf_tree_node->state to void *, so Niels can use a tree for fragment ha... | Daniel Hartmeier |
2001-06-27 | use proper icmp define | Niels Provos |
2001-06-27 | add -z flag for zeroing statistics. -s status no longer resets anything | Kjell Wooding |
2001-06-27 | add microtime, which seems to have gotten lost. | Kjell Wooding |
2001-06-27 | IPFILTER->NPF | Angelos D. Keromytis |