| Age | Commit message (Expand) | Author |
|---|
| 2009-06-22 | Always drop ICMPv6 in IPv4 datagrams, not only when compiled with INET6. | Joel Sing |
| 2009-06-22 | Fix scrub max-mss for IPv6 traffic. | Joel Sing |
| 2009-06-20 | Decrement routing socket count in MPLS detach case | Bret Lambert |
| 2009-06-17 | fix flow data values: first and last time, found by f-kons at yandex ru | Joerg Goltermann |
| 2009-06-17 | do better detection of when we have a better version of the tcp sequence | David Gwynne |
| 2009-06-14 | enable support for deferring the packet that creates a state so that your | David Gwynne |
| 2009-06-12 | rewrite the way states from pfsync are merged into the local state tree | David Gwynne |
| 2009-06-10 | jj reported a panic in bulk updates to me. this is my attempt to fix the | David Gwynne |
| 2009-06-08 | in pf_print_state_parts, do not use skw->proto to print the protocol | Henning Brauer |
| 2009-06-08 | bring back the fixed PF_AEQ/ANEQ/AZERO macros, the offending use has been | Henning Brauer |
| 2009-06-08 | "do not call PF_ANEQ with af=0, dragons". fixes a problem with skip | Stuart Henderson |
| 2009-06-08 | gah. something is not quite right, sthen sees strange behaviour fixed | Henning Brauer |
| 2009-06-08 | unfuck PF_AEQ PF_ANEQ PF_AZERO macos that got fucked when v6 support | Henning Brauer |
| 2009-06-06 | when xflags got changed, tell the userland by routing sockets | Rainer Giedat |
| 2009-06-05 | Add missing #ifdef INET6 ... #endif | Alexander Hall |
| 2009-06-05 | Initial support for routing domains. This allows to bind interfaces to | Claudio Jeker |
| 2009-06-04 | allow IPvShit to be turned off completely per-interface. | Henning Brauer |
| 2009-06-04 | Emulate a link state in tun(4). The link state goes up when the device is | Claudio Jeker |
| 2009-06-03 | make wireless interfaces priority 4 by default. other interfaces remain | Bob Beck |
| 2009-06-02 | do the pf_pkt_addr_changed(m) magic just like gif etc | Henning Brauer |
| 2009-06-01 | There is no need to use a variable just for sizeof(). Garbage collect ifa. | Claudio Jeker |
| 2009-05-31 | Consolidate common code for interface attachment into single function | Bret Lambert |
| 2009-05-31 | make set loginterface, set hostid, set reassemble and set debug | Henning Brauer |
| 2009-05-31 | Hide RTP_DOWN in the kernel and don't expose it to userland. Userland is | Claudio Jeker |
| 2009-05-31 | Reenable interface state tracking now that I found and fixed the cause of | Claudio Jeker |
| 2009-05-31 | Fix for the rtfree 2 panic seen by some people before the release. A missing | Claudio Jeker |
| 2009-05-26 | inherit the route label on cloned routes | Reyk Floeter |
| 2009-05-18 | The routing table index rtableid has type unsigned int in the routing | Alexander Bluhm |
| 2009-05-13 | dont go splx(s) in the ioctl handler if we havent done splnet(). this adds | David Gwynne |
| 2009-05-13 | only keep track of the number of updates on tcp connections. state sync on | David Gwynne |
| 2009-04-30 | treat log as what it is, a flag variable. effectively a noop now but stops | Henning Brauer |
| 2009-04-23 | print the type of the icmp message we're bitching about when debugging is | David Gwynne |
| 2009-04-18 | Make "route(8) change" aware of MPLS. | Michele Marchetto |
| 2009-04-17 | move the lastr = r assignment behind the anchor rule check so we don't | Henning Brauer |
| 2009-04-16 | Really turn fragment reassembly on by default. pfctl must handle this | David Krause |
| 2009-04-15 | little dose of scrubbing after the monster changes: | Henning Brauer |
| 2009-04-15 | move OK ICMP to NOISY level, makes it easier to run at MISC level; ok henning@ | David Krause |
| 2009-04-15 | move pfsync stale update messages to NOISY level; ok dlg@ henning@ | David Krause |
| 2009-04-14 | Correctly handle the case when state might be NULL in pf_test like | Alexander Yurchenko |
| 2009-04-11 | Avoid dereferencing a null pointer when pf attempts to translate a | Joel Sing |
| 2009-04-07 | after i took everything in this fiule apart and reassembled with a lot of | Henning Brauer |
| 2009-04-07 | turn fragment reassembly on by default. the is little to no reason to | Henning Brauer |
| 2009-04-06 | 1) scrub rules are completely gone. | Henning Brauer |
| 2009-04-04 | use time_uptime instead of time_second internally. time_uptime isnt | David Gwynne |
| 2009-03-31 | claudio has spent too much time with the mbuf macros. | David Gwynne |
| 2009-03-31 | do not include space in the end of the from for a hmac. after discussion | David Gwynne |
| 2009-03-23 | wait an appropriate amount of time before giving up on a bulk update, | David Gwynne |
| 2009-03-17 | we do know how to handle iack. in the rx path at least. | David Gwynne |
| 2009-03-15 | Introduce splsoftassert(), similar to splassert() but for soft interrupt | Miod Vallat |
| 2009-03-14 | Some ICMP types that also have icmp_id, pointed out by markus@ | Ryan Thomas McBride |
