Age | Commit message (Expand) | Author |
2005-06-08 | kill NS and DECNET bits | Henning Brauer |
2005-06-08 | bye bye netns (and a few leftover DECNET bits while here) | Henning Brauer |
2005-06-08 | huch, more netns shitz | Henning Brauer |
2005-06-08 | kill some leftover bits from netns and iso routing | Henning Brauer |
2005-06-08 | no more netns handling for the various tunnel devices and loopback | Henning Brauer |
2005-06-08 | in rtlabel_name2id, handle the case of an empty name: return 0 | Henning Brauer |
2005-06-08 | more inet6 stuff that got exposed | Theo de Raadt |
2005-06-08 | handle ramdisks, and kernels without inet6; henning ok | Theo de Raadt |
2005-06-07 | introduce a default "external" interface group, containing the interface(s) | Henning Brauer |
2005-06-07 | oops | Theo de Raadt |
2005-06-07 | avoid retarded C unsigned char -> signed integer promotion rules. | Theo de Raadt |
2005-06-07 | de-register, ok henning | Camiel Dobbelaar |
2005-06-07 | Run vlan_input before bridge_input, and change vlan_input to not | Camiel Dobbelaar |
2005-06-07 | fix a possible panic in error path, | Can Erkin Acar |
2005-06-07 | do not handle CCITT any longer | Henning Brauer |
2005-06-06 | Backout 1.64, switch back to two-pool allocation scheme (with oldnointr | Daniel Hartmeier |
2005-06-06 | use a define instead of hardcoding "all" in 3 places | Henning Brauer |
2005-06-06 | make cloned interfaces join an interface class group (carp for carpX, tun | Henning Brauer |
2005-06-05 | const'ify the char *groupname param to if_addgroup and if_delgroup | Henning Brauer |
2005-06-05 | const'ify the char * parameter to pfi_kif_get and pfi_group_change | Henning Brauer |
2005-06-02 | tsc, ryan left debug crap behind | Henning Brauer |
2005-06-01 | when dumping policies, skip those attached to a socket. | Hans-Joerg Hoexer |
2005-05-28 | Remove duplicate pfi_ifs. | Ryan Thomas McBride |
2005-05-28 | Only protect IDs by suser() | Hans-Joerg Hoexer |
2005-05-28 | Add SA replay counter synchronization to pfsync(4). Required for IPsec | Hakan Olsson |
2005-05-27 | add missing free on error. thanks to Andrey Matveev. | Reyk Floeter |
2005-05-27 | Use rtm_fmask instead of rtm_use. | Ryan Thomas McBride |
2005-05-27 | Calculate an MD5 checksum over the main pf ruleset. | Marco Pfatschbacher |
2005-05-27 | pass UID_MAX/NO_PID when the socket lookup failed, so tcpdump can | Daniel Hartmeier |
2005-05-27 | -in our current model, a kif has either a pointer to an interface (ifnet) or | Henning Brauer |
2005-05-27 | add back ACCEPT_GLAGS and active flag check, pointed out by cedric | Henning Brauer |
2005-05-27 | Convert IPSP_IPSEC_x to SADB_X_FLOW_TYPE_x. hshoexer@ ok. | Hakan Olsson |
2005-05-27 | Must convert back from IPPROTO_x to SADB_SATYPE_x. hshoexer@ ok | Hakan Olsson |
2005-05-27 | log two pairs of uid/pid through pflog: the uid/pid of the process that | Daniel Hartmeier |
2005-05-27 | Add rtm_fmask define to make the (ab)use of rtm_use more obvious. | Ryan Thomas McBride |
2005-05-27 | Use export_flow() to wrap policies retrieved via sysctl in pfkey message | Hans-Joerg Hoexer |
2005-05-27 | Add export_flow() | Hans-Joerg Hoexer |
2005-05-27 | only access if_linkstatehooks inside splnet. | Marco Pfatschbacher |
2005-05-27 | Allow us to clear the RTM_JUMBO flag as well as set it. | Ryan Thomas McBride |
2005-05-27 | Experimental support for opportunitic use of jumbograms where only some hosts | Ryan Thomas McBride |
2005-05-26 | remove last races of SIOCADDRT and SIOCDELRT, the 4.3BSD routing table ioctls | Henning Brauer |
2005-05-26 | support 'log' and 'log-all' in 'nat/rdr/binat pass' rules. original patch | Daniel Hartmeier |
2005-05-26 | turd polishing | Henning Brauer |
2005-05-26 | repair (self) notation - just attach "self" to the "all" group | Henning Brauer |
2005-05-26 | deny groupnames ending in digits in if_addgroup, frantzen ok | Henning Brauer |
2005-05-26 | oups another unused var | Henning Brauer |
2005-05-26 | unused var | Henning Brauer |
2005-05-26 | remove the interface family group (i. e. "em" for "em0") | Henning Brauer |
2005-05-25 | when an interface joins or leaves a group call back into pf so it can | Henning Brauer |
2005-05-25 | AESCTR support for ESP (RFC 3686); ok hshoexer | Markus Friedl |