| Age | Commit message (Expand) | Author |
|---|
| 2010-01-10 | replace a pad in the pfsync subheader with a length field. it stores the | David Gwynne |
| 2010-01-09 | No need to call bpfdetach() in mpe_clone_destroy() since this is done in | Claudio Jeker |
| 2010-01-08 | During "ifconfig $if -inet6" remove v6 addresses even if the | Stefan Sperling |
| 2009-12-26 | Initial rdomain support for mpe(4). Caveat: assumes MPLS is always in | Claudio Jeker |
| 2009-12-24 | add support to pf for filtering a packet by the interface it was received | David Gwynne |
| 2009-12-14 | fix sticky-address - by pretty much re-implementing it. still following | Henning Brauer |
| 2009-12-13 | Ensure that if_start() is called at IPL_NET. | Joel Sing |
| 2009-12-08 | move "pf: key search" and "pf: key setup" messages to PF_DEBUG_NOISY | Stuart Henderson |
| 2009-12-03 | fix order dependency of pfsync interface setup, with claudio; | Otto Moerbeek |
| 2009-11-26 | magical fix for a fault which reliably brings my firewalls down. i think | David Gwynne |
| 2009-11-24 | kill obsolete natpass | Henning Brauer |
| 2009-11-23 | with the old code we initialized the state keys early in some cases | Henning Brauer |
| 2009-11-23 | one kinda-missing log |= PFLOG_FORCE in the v6 case, spotted by claudio | Henning Brauer |
| 2009-11-23 | sync the handling of the log flag from pf_test (where it is correct) | Henning Brauer |
| 2009-11-23 | pf_test_fragment: we need to bail out if action == PF_DROP, not | Henning Brauer |
| 2009-11-23 | sync some comments with reality | Henning Brauer |
| 2009-11-23 | remove the nat_rule pointer on pf_state and pf_pdesc, obsolete after | Henning Brauer |
| 2009-11-22 | cleanup after the NAT changes. we used to have multiple rulesets (scrub, | Henning Brauer |
| 2009-11-22 | Add a lot of bpf and counter manipulation to the bridge. The bridge | Theo de Raadt |
| 2009-11-21 | knf | Henning Brauer |
| 2009-11-21 | Add a way to bind the tunnel endpoint of a gif/gre interface into a | Claudio Jeker |
| 2009-11-18 | improve the bpf path. packets we send out via the bridge are seen, but | Theo de Raadt |
| 2009-11-18 | set IFCAP_VLAN_MTU; from brad | Theo de Raadt |
| 2009-11-18 | do not do setup that ether_ifattach() takes care of; ok jsg | Theo de Raadt |
| 2009-11-13 | Extend the protosw pr_ctlinput function to include the rdomain. This is | Claudio Jeker |
| 2009-11-12 | be paranoid in case the action array changes size (again, grr) | Theo de Raadt |
| 2009-11-12 | count packets; from claudio | Theo de Raadt |
| 2009-11-11 | Fix some memory leaks in error cases. | Jonathan Gray |
| 2009-11-09 | bump pfsync protocol version | David Gwynne |
| 2009-11-09 | s/MPLS_DEBUG/VETHER_DEBUG | Marco Pfatschbacher |
| 2009-11-09 | Every selwakeup() should have a matching KNOTE() (even if kqueue isn't | Nicholas Marriott |
| 2009-11-09 | vether(4) is a virtual ethernet device driver which can be used | Theo de Raadt |
| 2009-11-05 | IPv6 support for divert sockets. | Michele Marchetto |
| 2009-11-03 | Use u_int16_t for rdomains for everything. Using various types makes | Claudio Jeker |
| 2009-11-03 | rtables are stacked on rdomains (it is possible to have multiple routing | Claudio Jeker |
| 2009-11-02 | s/hz/Hz/ on multiples of the SI unit hertz other than MHz. | Igor Sobrado |
| 2009-10-29 | I missed updating a line for the AF_INET6 route case when | Jonathan Gray |
| 2009-10-28 | Add a dedicated pf pool for route options as suggested by henning, | Jonathan Gray |
| 2009-10-26 | Set the rdomain in bpfwrite() to the interface rdomain so that bpf sender | Claudio Jeker |
| 2009-10-26 | Replace pool_get() + bzero() with pool_get(..., PR_ZERO). | Michael Knudsen |
| 2009-10-10 | fix mbuf leak in rtinit() | Dariusz Swiderski |
| 2009-10-06 | Redo the route lookup in the output (and IPv6 forwarding) path if the | Claudio Jeker |
| 2009-10-06 | Replace if (af) tests operating as an af blacklist with stricter switch | Ryan Thomas McBride |
| 2009-10-04 | Add (again) support for divert sockets. They allow you to: | Michele Marchetto |
| 2009-09-28 | when inserting a state, turn the error that pf_state_insert returns | David Gwynne |
| 2009-09-21 | Properly reference count bpf descriptors when using kqueue. | Can Erkin Acar |
| 2009-09-17 | Remove the comaptibility structures for routing socket version 3. | Claudio Jeker |
| 2009-09-17 | Wrap trunk_enqueue() calls in splnet() since sending out lacp packets | Claudio Jeker |
| 2009-09-17 | Add an splassert check trunk_enqueue() calling this function at anything | Claudio Jeker |
| 2009-09-16 | style: in pf_test_state_other, fix indentation, kill excessive newlines, | Henning Brauer |
