Age | Commit message (Expand) | Author |
2003-01-04 | Honour noroute in skip step calculation, found by cedric@ | Daniel Hartmeier |
2003-01-04 | Remove unused pf_add_addr(), ok mcbride@ | Daniel Hartmeier |
2003-01-03 | KNF | Theo de Raadt |
2003-01-03 | Fix the unicast case call to bridge_rtupdate(), check that the -source- | Jason Wright |
2003-01-03 | 1) pfr_insert_kentries() cannot return ENOMEM anymore -> make it void. | Cedric Berger |
2003-01-02 | Remove explicit numbering of enums. | Ryan Thomas McBride |
2003-01-02 | Require a direction to be specified for rules which do routing. | Ryan Thomas McBride |
2003-01-02 | When route-to/reply-to is used in combination with address translation, | Daniel Hartmeier |
2003-01-01 | Repair my last commit - zero the 2 radix nodes before inserting into table. | Cedric Berger |
2003-01-01 | use a #define for the default state table size | Henning Brauer |
2003-01-01 | KNF | Henning Brauer |
2003-01-01 | KNF | Henning Brauer |
2003-01-01 | disable the CLSTATS flag for now, since it violates the O_RDONLY check. | Cedric Berger |
2003-01-01 | Behaves correctly when duplicate addresses are given in the same ioctl. | Cedric Berger |
2003-01-01 | Behaves properly when someone try to insert/delete the same table name | Cedric Berger |
2003-01-01 | Remove skip step for action (scrub vs. non-scrub), as scrub rules are | Daniel Hartmeier |
2003-01-01 | Fix breakage from PF_RULESET_MAX increase, regress tests match again. | Daniel Hartmeier |
2002-12-31 | Split scrub rules out from the filter rules in the kernel. | Ryan Thomas McBride |
2002-12-31 | don't overrun user-supplied buffer. from jinmei@kame, deraadt ok | Jun-ichiro itojun Hagino |
2002-12-31 | Use a default state table limit of 10000 entries. This is safe for all | Daniel Hartmeier |
2002-12-30 | Don't forget to copyout the time at which statistics got cleared. | Cedric Berger |
2002-12-30 | really count the number of deleted tables - obvious fix. | Cedric Berger |
2002-12-30 | KNF | Henning Brauer |
2002-12-30 | KNF | Henning Brauer |
2002-12-29 | Add support for radix tables for source and destination of PF rules. | Cedric Berger |
2002-12-27 | Bugfix and better error handling: | Ryan Thomas McBride |
2002-12-27 | Fixups for pf_route and pf_route6. | Ryan Thomas McBride |
2002-12-27 | Handle binat-anchor rules in pf_match_translation(), they don't have a | Daniel Hartmeier |
2002-12-27 | Initialize rt_ifp in newly allocated pf_state objects to NULL. | Daniel Hartmeier |
2002-12-26 | Prettier debug printing in pf_map_addr. | Ryan Thomas McBride |
2002-12-26 | Additional sanity checks for pf_route(). Please report when any of these | Daniel Hartmeier |
2002-12-23 | no need to htons the port, it's already in net order, since we swapped it bac... | Michael Shalayeff |
2002-12-23 | Change from array to single pf_pabuf (no longer need multiple buffers as | Ryan Thomas McBride |
2002-12-22 | pfioc_changealtq is not needed anymore; queues will eventually be | Ryan Thomas McBride |
2002-12-22 | Handle rdr rules with unspecified proxy ports correctly. Also don't | Ryan Thomas McBride |
2002-12-22 | mv PF_RULESET_MAX into the enum, slightly less confusing. | Ryan Thomas McBride |
2002-12-20 | replace struct assignment w/ bcopy w/ help and testing of millert@; henning@ ... | Michael Shalayeff |
2002-12-19 | Clear pf_state.nat_rule pointers when non-main nat rules are removed. | Daniel Hartmeier |
2002-12-19 | Replace skip step calculation so it scales O(n) instead of O(n*n). | Daniel Hartmeier |
2002-12-19 | fix 'no nat/rdr/binat' evaluation. from mcbride@, slightly modified :) | Daniel Hartmeier |
2002-12-19 | Initialize pf_state.nat_rule to NULL if there's no translation used. | Daniel Hartmeier |
2002-12-18 | Store translation rule pointer in state entries, so pfctl -vsn can print | Daniel Hartmeier |
2002-12-18 | KNF | Henning Brauer |
2002-12-18 | little style | Henning Brauer |
2002-12-18 | When logging packets matched by rules within anchors, use the anchor rule | Daniel Hartmeier |
2002-12-18 | KNF | Henning Brauer |
2002-12-18 | big KNF round | Henning Brauer |
2002-12-18 | Pass skip step values through ioctl interface, pfctl -vvsr shows them, | Daniel Hartmeier |
2002-12-18 | KNF | Henning Brauer |
2002-12-18 | Match the rule protocol against the actual protocol of the packet, not just | Ryan Thomas McBride |