Age | Commit message (Expand) | Author |
2005-06-06 | use a define instead of hardcoding "all" in 3 places | Henning Brauer |
2005-06-06 | make cloned interfaces join an interface class group (carp for carpX, tun | Henning Brauer |
2005-06-05 | const'ify the char *groupname param to if_addgroup and if_delgroup | Henning Brauer |
2005-06-05 | const'ify the char * parameter to pfi_kif_get and pfi_group_change | Henning Brauer |
2005-06-02 | tsc, ryan left debug crap behind | Henning Brauer |
2005-06-01 | when dumping policies, skip those attached to a socket. | Hans-Joerg Hoexer |
2005-05-28 | Remove duplicate pfi_ifs. | Ryan Thomas McBride |
2005-05-28 | Only protect IDs by suser() | Hans-Joerg Hoexer |
2005-05-28 | Add SA replay counter synchronization to pfsync(4). Required for IPsec | Hakan Olsson |
2005-05-27 | add missing free on error. thanks to Andrey Matveev. | Reyk Floeter |
2005-05-27 | Use rtm_fmask instead of rtm_use. | Ryan Thomas McBride |
2005-05-27 | Calculate an MD5 checksum over the main pf ruleset. | Marco Pfatschbacher |
2005-05-27 | pass UID_MAX/NO_PID when the socket lookup failed, so tcpdump can | Daniel Hartmeier |
2005-05-27 | -in our current model, a kif has either a pointer to an interface (ifnet) or | Henning Brauer |
2005-05-27 | add back ACCEPT_GLAGS and active flag check, pointed out by cedric | Henning Brauer |
2005-05-27 | Convert IPSP_IPSEC_x to SADB_X_FLOW_TYPE_x. hshoexer@ ok. | Hakan Olsson |
2005-05-27 | Must convert back from IPPROTO_x to SADB_SATYPE_x. hshoexer@ ok | Hakan Olsson |
2005-05-27 | log two pairs of uid/pid through pflog: the uid/pid of the process that | Daniel Hartmeier |
2005-05-27 | Add rtm_fmask define to make the (ab)use of rtm_use more obvious. | Ryan Thomas McBride |
2005-05-27 | Use export_flow() to wrap policies retrieved via sysctl in pfkey message | Hans-Joerg Hoexer |
2005-05-27 | Add export_flow() | Hans-Joerg Hoexer |
2005-05-27 | only access if_linkstatehooks inside splnet. | Marco Pfatschbacher |
2005-05-27 | Allow us to clear the RTM_JUMBO flag as well as set it. | Ryan Thomas McBride |
2005-05-27 | Experimental support for opportunitic use of jumbograms where only some hosts | Ryan Thomas McBride |
2005-05-26 | remove last races of SIOCADDRT and SIOCDELRT, the 4.3BSD routing table ioctls | Henning Brauer |
2005-05-26 | support 'log' and 'log-all' in 'nat/rdr/binat pass' rules. original patch | Daniel Hartmeier |
2005-05-26 | turd polishing | Henning Brauer |
2005-05-26 | repair (self) notation - just attach "self" to the "all" group | Henning Brauer |
2005-05-26 | deny groupnames ending in digits in if_addgroup, frantzen ok | Henning Brauer |
2005-05-26 | oups another unused var | Henning Brauer |
2005-05-26 | unused var | Henning Brauer |
2005-05-26 | remove the interface family group (i. e. "em" for "em0") | Henning Brauer |
2005-05-25 | when an interface joins or leaves a group call back into pf so it can | Henning Brauer |
2005-05-25 | AESCTR support for ESP (RFC 3686); ok hshoexer | Markus Friedl |
2005-05-24 | oops | Theo de Raadt |
2005-05-24 | let ramdisks compile again. people -- please always try to compile with your... | Theo de Raadt |
2005-05-24 | support trunk stacking (trunks as trunk ports) and some fixes | Reyk Floeter |
2005-05-24 | include trunk.h to get the NTRUNK value | Reyk Floeter |
2005-05-24 | add net.inet.ip.ifq for monitoring and changing ifqueue; similar to netbsd | Markus Friedl |
2005-05-24 | add support for brace notation for interface groups, i. e. (testgroup) matches | Henning Brauer |
2005-05-24 | Make sure all fields in the SADB_DUMP header are zeroed properly. hshoexer@ ok. | Hakan Olsson |
2005-05-24 | actually delete the interface from the member list when it leaves the group | Henning Brauer |
2005-05-24 | initial import of a trunking (link aggregation and link failover) | Reyk Floeter |
2005-05-24 | Better SA state reporting. markus@, hshoexer@ ok. | Hakan Olsson |
2005-05-24 | keep a list of member interfaces in ifg_group | Henning Brauer |
2005-05-23 | change pool allocation of table entries, no longer use the oldnointr | Daniel Hartmeier |
2005-05-23 | further cleanup: don't mimic ifnet and add hooks and the dohooks() stuff to | Henning Brauer |
2005-05-23 | don't deny access to "special" tables in get_addrs | Henning Brauer |
2005-05-23 | repair updates for the tables used for (interface) notation | Henning Brauer |
2005-05-22 | missing #if NPF > 0 around ifgroups attachments | Henning Brauer |