| Age | Commit message (Expand) | Author |
|---|
| 2007-08-23 | allow RSTs with th_seq == seqlo +- 1, reduces the amount of 'loose state' | Daniel Hartmeier |
| 2007-08-21 | don't access th_flags when it isn't available (only 8 bytes of the | Daniel Hartmeier |
| 2007-08-20 | Align the packet after the ppp header. | Can Erkin Acar |
| 2007-08-14 | Make sure all the packet is in one continuous mbuf. | Can Erkin Acar |
| 2007-08-07 | Use the length of the mbuf instead of the packet. | Can Erkin Acar |
| 2007-08-06 | Fix some "that that"s. | Tom Cosgrove |
| 2007-07-30 | With adding ipsec tags and exporting flow filters via sysctl SADB_GET | Hans-Joerg Hoexer |
| 2007-07-25 | Back out the tracking of procs in struct selinfo. There's one serious | Artur Grabowski |
| 2007-07-21 | add ETHERTYPE_PAE (802.1X Port Access Entity). | Damien Bergamini |
| 2007-07-18 | Don't drop outgoing packets in case of a congested input queue. | Marco Pfatschbacher |
| 2007-07-13 | remove obsolete pfi_statehead and pfik_w_states; ok henning@ | Markus Friedl |
| 2007-07-10 | adjust pf_find_state_all() so that it works correctly for the new global | Kurt Miller |
| 2007-07-06 | btintrq has been removed from bt_input.c, don't reference it here. | Christian Weisgerber |
| 2007-07-04 | Fix a use after free crash in in_delmulti(). If a interface is detached | Claudio Jeker |
| 2007-07-04 | No m_copyback for ICMP and "other" protocols on rdr/binat. | Marco Pfatschbacher |
| 2007-06-26 | Fix a race condition during ruleset reload; make sure we don't walk off | Ryan Thomas McBride |
| 2007-06-25 | crank ifq_maxlen from 50 to 256, so it is not smaller than most interfaces | Henning Brauer |
| 2007-06-25 | pretty mechanical change: now that the state tables use seperate state | Henning Brauer |
| 2007-06-24 | Save some bytes and make code more readable by removing junk union and | Ryan Thomas McBride |
| 2007-06-22 | export the flow/filter information attached to the SA, too; ok hshoexer@ | Markus Friedl |
| 2007-06-21 | force logif to zero if no logging is asked for | Henning Brauer |
| 2007-06-21 | reimplement interface bound states in a non-retarded way. | Henning Brauer |
| 2007-06-20 | Allow "log" for nat rules without "pass". | Marco Pfatschbacher |
| 2007-06-17 | add back missing bcopy & break, got lost when removing arcnet. | Henning Brauer |
| 2007-06-15 | in pf_test_rule, before handling IPPROTO_ICMP / IPPROTO_ICMPV6, check that | Henning Brauer |
| 2007-06-14 | Add a new "rtlabel" option to ifconfig. It allows to specify a route label | Reyk Floeter |
| 2007-06-14 | sprinkle some #ifdef IPSEC so that pfsync compiles w/o ipsec | Henning Brauer |
| 2007-06-11 | move definitions for the flags in the mbuf header used by pf to mbuf.h | Henning Brauer |
| 2007-06-09 | fix wrong argument passing to m_copyback for the log case | Henning Brauer |
| 2007-06-09 | sizeof(ptr) is no good if you want sizeof(*ptr). icmp/icmpv6. | Henning Brauer |
| 2007-06-08 | kill arcnet leftovers, some pt out by Mike Belopuhov <mkb@crypt.org.ru>, | Henning Brauer |
| 2007-06-07 | PR 5502 From: Marc Huber <Marc.Huber@web.de> | Henning Brauer |
| 2007-06-06 | vlan interfaces do not allow the parent interface and the vlan number to be | Henning Brauer |
| 2007-06-06 | remove remaining IPX hooks. all inside #ifdef IPX, so no actual change | Henning Brauer |
| 2007-06-02 | pf_set_rt_ifp accesses state key data, so must be called later | Henning Brauer |
| 2007-06-01 | factor out duplicated code to allocate state key and cross-reference it | Henning Brauer |
| 2007-06-01 | fold pf_test_tcp(), pf_test_udp(), pf_test_icmp(), pf_test_other() into | Henning Brauer |
| 2007-06-01 | apply the "skip ipsec if there are no flows" speedup diff to IPv6 too. | Henning Brauer |
| 2007-05-31 | Make sure that pf_state_key and pf_state_key_cmp are in sync. | Ryan Thomas McBride |
| 2007-05-31 | unlink the right state, ryan ok | Henning Brauer |
| 2007-05-31 | Move the state id and creatorid (used mainly by pfsync) into struct pf_state. | Ryan Thomas McBride |
| 2007-05-31 | Unbreak pf.c compilation on gcc 2.95 architectures. Found by todd@ | Ryan Thomas McBride |
| 2007-05-31 | First step of rearranging pf's state table internals... | Ryan Thomas McBride |
| 2007-05-29 | remove token ring leftovers, ok mcbride pval | Henning Brauer |
| 2007-05-29 | It helps to commit removals from the tree that has the files cvs removed | Claudio Jeker |
| 2007-05-29 | now i get my hands dirty in here... from if_ethersubr.c: | Henning Brauer |
| 2007-05-29 | there was code inside | Henning Brauer |
| 2007-05-29 | Move tokenring support to the attic where it can join the cards that where | Claudio Jeker |
| 2007-05-29 | Define IF_ENQUEUE() and friends as proper C statements using do ... while | Uwe Stuehler |
| 2007-05-29 | Use atomic operations to operate on netisr, instead of clearing it at splhigh. | Miod Vallat |
