Age | Commit message (Expand) | Author |
2004-01-27 | drop packet if kif == NULL; ok henning deraadt | Markus Friedl |
2004-01-27 | don't convert tcpmd5 to ip-over-ip in SADB_X_GETSPROTO; from hshoexer | Markus Friedl |
2004-01-26 | - use SIOC[GS]WAVELAN. | Federico G. Schwindt |
2004-01-22 | - Include the value of pf_state.timeout in pfsync messages | Ryan Thomas McBride |
2004-01-20 | the pfsync interface does not have a baudrate, so don't claim 100 MBit/s | Henning Brauer |
2004-01-20 | Ignore pfsync packets if pf is not running. | Ryan Thomas McBride |
2004-01-19 | Update comment; handling PFSYNC_ACT_UPD in pfsync_input() is no longer | Ryan Thomas McBride |
2004-01-19 | Clean up creation and expiry timestamp calculations. | Ryan Thomas McBride |
2004-01-18 | Port is already stored in network byte order, no need to convert. | Ryan Thomas McBride |
2004-01-16 | Fix IPv6 stateful tcp scrubbing by not dereferencing a null pointer. | Ryan Thomas McBride |
2004-01-15 | add a RTM_IFANNOUNCE message; from netbsd; ok itojun, henning | Markus Friedl |
2004-01-12 | use klist_invalidate to permit destroy while kqueued. ok mpf@ | Ted Unangst |
2004-01-09 | fix leak ether_deatch(): if if_free_sadl() is called before if_detach() | Markus Friedl |
2004-01-07 | PFI_MTYPE leak; ok cedric@ | Markus Friedl |
2004-01-07 | ieee80211 framework from NetBSD; ok'd by several people some time ago. | Federico G. Schwindt |
2004-01-06 | Drop UDP packets with destination port 0, or zero or oversized payload | Daniel Hartmeier |
2004-01-05 | stop ifc_destroy() if there are still knotes registered. | Marco Pfatschbacher |
2004-01-05 | 0 -> (void *)NULL for last argument of icmp_error(), which is of type | Daniel Hartmeier |
2004-01-05 | Repair my merging error, simplify DIOCCLRSTATUS code. ok dhartmei@ | Cedric Berger |
2004-01-05 | Repair merge errors. Thanks Pyun YongHyeon, Sorry Henning :) | Cedric Berger |
2004-01-04 | oops... string.h ended up being included twice; pointed out by espie | Peter Valchev |
2004-01-04 | better macro name (IF_LOCKED -> BOUND_IFACE). from markus. | Cedric Berger |
2004-01-04 | include proper protos for userland; deraadt | Peter Valchev |
2004-01-03 | make sure userland sees memcmp and friends (gcc3) | Marc Espie |
2004-01-03 | put an mi wrapper around stdarg.h/varargs.h. gcc3 moved stdarg/varargs macros | Marc Espie |
2003-12-31 | spacing. note this, cedric | Theo de Raadt |
2003-12-31 | delay interfaces attach until "self" has been created; ok cedric@ | Markus Friedl |
2003-12-31 | Many improvements to the handling of interfaces in PF. | Cedric Berger |
2003-12-28 | Add a new PFSYNC_ACT_UREQ message type. | Ryan Thomas McBride |
2003-12-22 | pasto in pf_status.src_nodes backup, from 'kirash' | Daniel Hartmeier |
2003-12-19 | more const-correctness, ok mcbride@ | Daniel Hartmeier |
2003-12-19 | i wrote much of these, assert my copyright | Henning Brauer |
2003-12-19 | rn_satsifies_leaf -> rn_satisfies_leaf | Brad Smith |
2003-12-18 | Save pf_status.hostid and pf_status.stateid in the DIOCCLRSTATUS | Ryan Thomas McBride |
2003-12-18 | Unbreak compile with no pfsync(4) device. | Ryan Thomas McBride |
2003-12-18 | TCP timestamp modulation (scrub reassemble tcp) fix from frantzen@ | Daniel Hartmeier |
2003-12-18 | resolve compiler warnings, from Pyun YongHyeon, ok cedric@, mcbride@ | Daniel Hartmeier |
2003-12-17 | start spanning tree on ifconfig up; from Marco Pfatschbacher; ok jason@ | Markus Friedl |
2003-12-16 | when a bridge filter rule specifies both src and dst mac address, we do not | Henning Brauer |
2003-12-16 | return error in ifc_destroy; ok deraadt, itojun, cedric, hshoexer | Markus Friedl |
2003-12-16 | Don't do all the heavy pfsync processing if there are no bpf listeners | Ryan Thomas McBride |
2003-12-15 | sc_sp is a #define on some architectures, use a different name | Theo de Raadt |
2003-12-15 | ryan left a few for me ;-) | Henning Brauer |
2003-12-15 | Fix whitespace screwups before henning wakes up. | Ryan Thomas McBride |
2003-12-15 | Add initial support for pf state synchronization over the network. | Ryan Thomas McBride |
2003-12-15 | Add support to track stateful connections by source ip. This allows us | Ryan Thomas McBride |
2003-12-13 | initial support ifconfig destroy; ok deraadt@ | Markus Friedl |
2003-12-12 | Move PF interface code to new net/pf_if.c | Cedric Berger |
2003-12-12 | small compiler warning cleanup (#error instead of bailing out) | Hans-Joerg Hoexer |
2003-12-11 | Fix PR3587 and other related problems with NAT and table stats. | Cedric Berger |