Age | Commit message (Expand) | Author |
2002-06-11 | split the grammar of scrub(fragcache) into scrub ... 'fragment reassemble', | Mike Frantzen |
2002-06-11 | sprinkle splasserts where function comments tell us to. | Artur Grabowski |
2002-06-11 | splassert(IPL_NET) where comment says that we should. | Artur Grabowski |
2002-06-11 | splassert(IPL_SOFTNET) where comment indicate that. | Artur Grabowski |
2002-06-11 | KNF (tabs, return (x)) | Daniel Hartmeier |
2002-06-11 | enumerate UDP and OTHER state levels (similar to tcp_fsm.h) | Mike Frantzen |
2002-06-11 | SCRUB(fragcache) to do gap tracking and overlap pruning of IPv4 fragments | Mike Frantzen |
2002-06-11 | Make NAT proxy port range configurable per rule, for instance privileged | Daniel Hartmeier |
2002-06-11 | Don't panic when pf_insert_state() detects an attempt to insert a | Daniel Hartmeier |
2002-06-11 | KNF return x -> return (x), ok frantzen@ | Daniel Hartmeier |
2002-06-11 | rework pfctl statistics display | Henning Brauer |
2002-06-10 | - stop abusing IFF_UP. | Jun-ichiro itojun Hagino |
2002-06-10 | Split common code which converts a multicast address to an ethernet | Chris Cappuccio |
2002-06-10 | Allow ports to be specified in nat rules, useful later on for individual | Daniel Hartmeier |
2002-06-10 | #include <sys/timeout.h>, from Chris Kuethe | Daniel Hartmeier |
2002-06-10 | easy error checks first. | Jun-ichiro itojun Hagino |
2002-06-10 | Don't #include <sys/malloc.h> | Daniel Hartmeier |
2002-06-10 | prevent mbuf leak on icmp_do_error() failure. | Jun-ichiro itojun Hagino |
2002-06-09 | Export compression info only if the SA (xform) is initialized. | Angelos D. Keromytis |
2002-06-09 | don't need device.h | Jason Wright |
2002-06-09 | Make pf_nat.saddr/daddr a pf_rule_addr instead of pf_addr_wrap, so it | Daniel Hartmeier |
2002-06-09 | if_addrlen need not be 4, set to 0. From: Martin Husemann <martin@duskware.de> | Jun-ichiro itojun Hagino |
2002-06-09 | make sure to bzero sockaddr_in | Jun-ichiro itojun Hagino |
2002-06-09 | support SIO*PHYADDR, so that we can configure outer address with ifconfig(8) | Jun-ichiro itojun Hagino |
2002-06-09 | reapply patch from jasoni@ for ICMP6_PACKET_TOO_BIG | Philipp Buehler |
2002-06-09 | reapply patch from jasoni@ for pf_route[6] | Philipp Buehler |
2002-06-09 | split ioctl functions out of pf.c into pf_ioctl.c | Philipp Buehler |
2002-06-09 | no need to log() on outgoing packet on !IFF_UP case | Jun-ichiro itojun Hagino |
2002-06-09 | force FDDI link MTU be FDDI IPv4 MTU. PR 2714. jason ok | Jun-ichiro itojun Hagino |
2002-06-09 | This commit commit commit without testing has to STOP. BE CAREFUL. | Theo de Raadt |
2002-06-09 | uncommit, broken (by corrupt diff) | Philipp Buehler |
2002-06-09 | new file sys/net/pf_ioctl.c | Philipp Buehler |
2002-06-09 | increment ifs6_in_toobig if ipv6 packet too large for interface in | jasoni |
2002-06-09 | in pf_route{6}, if too large for outgoing interface and not allowed to | jasoni |
2002-06-08 | use consistent style in function declarations | jasoni |
2002-06-08 | If a IP packet is too large for the outgoing interface and DF is set, | jasoni |
2002-06-08 | splnet -> splsoftnet where appropriate | Jun-ichiro itojun Hagino |
2002-06-08 | more splnet protection to dom_ifattach | Jun-ichiro itojun Hagino |
2002-06-08 | protect dom_ifattach by splnet | Jun-ichiro itojun Hagino |
2002-06-08 | keep the count of fragments consistent when we have to do a fail safe drop | Mike Frantzen |
2002-06-08 | Make state timeouts configurable per rule, like | Daniel Hartmeier |
2002-06-07 | Detect wrap-around of timeout and set it to its maximum value. Hacky | Angelos D. Keromytis |
2002-06-07 | increase rule label length from 32 to 64 chars | Henning Brauer |
2002-06-07 | add the possibility to configure a TTL while return-rst | Philipp Buehler |
2002-06-07 | in pf_route{6}, do not pass thru pf_test again if the outgoing | jasoni |
2002-06-07 | Add "(max <number>)" option for "keep/modulate state" to limit the number | Daniel Hartmeier |
2002-06-07 | switch from AVL tree's to herr Provos' red-black trees | Mike Frantzen |
2002-06-07 | Call pf_test() from pf_route() to filter (and translate) routed packets, | Daniel Hartmeier |
2002-06-07 | sync behaviour about DF bit between ip_output()/tcp_response() | Philipp Buehler |
2002-06-07 | There is absolutely no need to protect a reference to mono_time.tv_sec with s... | Artur Grabowski |