| Age | Commit message (Expand) | Author |
|---|
| 2008-02-20 | make return-rst work correctly in the IPv6 case again. | Henning Brauer |
| 2008-02-20 | Fix a mbuf leak which can be triggered on a system | Brad Smith |
| 2008-02-16 | switch to RFC 1948 style ISN, too; ok mcbride, dhartmei, henning | Markus Friedl |
| 2008-02-05 | Move carp load balancing (ARP/IP) to a simpler configuration scheme. | Marco Pfatschbacher |
| 2008-01-25 | Prevent USB network devices to generate a page fault trap when detached | Marcus Glocker |
| 2008-01-19 | Fix add_net_randomness() not being called because the wrong | Marco Pfatschbacher |
| 2008-01-17 | In ether_input() scheduling the soft interrupt and queueing the | Alexander Bluhm |
| 2008-01-12 | Kill all timeouts and undo carp demotion on pfsync_clone_destroy. | Marco Pfatschbacher |
| 2008-01-10 | return with ENOTTY instead of EINVAL for unknown ioctl requests to trunk | Brad Smith |
| 2008-01-05 | make sure all callers of rtlabel_id2name check for a null return value. | Henning Brauer |
| 2008-01-05 | rtlabel_id2name() can return NULL if there is no route label.. | Theo de Raadt |
| 2008-01-02 | Accept BPF_MUL as a valid instruction in bpf_validate() also improve | Can Erkin Acar |
| 2007-12-30 | In pf_normalize_tcpopt() call pf_pull_hdr() address family safe. | Marcus Glocker |
| 2007-12-30 | Make "scrub max-mss" rule work correctly; | Marcus Glocker |
| 2007-12-20 | increment the match/nomatch table counters when using a table/pool in | Reyk Floeter |
| 2007-12-20 | return with ENOTTY instead of EINVAL for unknown ioctl requests. | Brad Smith |
| 2007-12-14 | add sysctl entry points into various network layers, in particular to | Theo de Raadt |
| 2007-12-05 | Revert change which seems to break things like dhclient. Requested by | Kenneth R Westerback |
| 2007-12-04 | 1500 is a 'magic number' in the protocol that all implementations | Claudio Jeker |
| 2007-12-04 | Always compare the nexthop if one is specified even if it is a non-multipath | Claudio Jeker |
| 2007-12-02 | DIOC{GET,ADD}STATE incorrectly use a user provided pointer without using | Christopher Pascoe |
| 2007-12-02 | When pf_insert_state state succeeds, increase the state count on the | Christopher Pascoe |
| 2007-12-02 | initialize altq->altq_disc to NULL, from Max Laier | Daniel Hartmeier |
| 2007-12-02 | Don't put state key if pf_insert_state fails. pf_detach_state would have | Christopher Pascoe |
| 2007-12-02 | Don't leak state if key allocation fails during add. | Christopher Pascoe |
| 2007-12-02 | Set expiry timestamp when importing a state, otherwise it expires on the | Christopher Pascoe |
| 2007-12-02 | DIOCADDSTATE would always dereference a NULL pointer during this copy | Christopher Pascoe |
| 2007-11-27 | typos; ok jmc@ | Martynas Venckus |
| 2007-11-26 | typos; ok jmc@ | Martynas Venckus |
| 2007-11-24 | some spelling fixes from Martynas Venckus | Jason McIntyre |
| 2007-11-22 | pf_src_tree_remove_state() is called upon pf_insert_state() failures. | Henning Brauer |
| 2007-11-22 | Factor out the virtual host portion of carp into a separate struct | Marco Pfatschbacher |
| 2007-11-21 | simplify sppp_chap_scr() now that we are using arc4random_bytes() | Can Erkin Acar |
| 2007-11-20 | Fix possible mbuf leak on error. ok reyk@ | Can Erkin Acar |
| 2007-11-18 | backout 1.562 since it triggers the problem described in pr 5648 | Theo de Raadt |
| 2007-11-18 | Sync struct ifaltq to match struct ifqueue. | Marco Pfatschbacher |
| 2007-11-16 | in pf_test_fragment(), ignore protocol-specific criteria for packets of | Daniel Hartmeier |
| 2007-11-16 | use arc4random_bytes() instead of multiple arc4random() calls; | Damien Miller |
| 2007-11-11 | Don't leak pfstatekey upon insert conflict (most often caused via pfsync). | Christopher Pascoe |
| 2007-11-07 | Check for pfi_kif's that are neither groups nor have a real interface. | Marco Pfatschbacher |
| 2007-11-01 | correct fix | Theo de Raadt |
| 2007-11-01 | tsk tsk tsk, noone tested this; spotted by canacar | Theo de Raadt |
| 2007-10-31 | 'block return' must not send anything on blocked icmp packets. | Marco Pfatschbacher |
| 2007-10-31 | Don't leak potentially secret authname through ioctl interface. | Mike Belopuhov |
| 2007-10-30 | fix a typo, LIST_FOREACH(bp2, ... and then using bp instead of bp2 | Henning Brauer |
| 2007-10-25 | Fix probability rules w/ numbers (e.g probability 0.4). | Marco Pfatschbacher |
| 2007-10-22 | use the input mbuf for the first active port instead of copying it in | Reyk Floeter |
| 2007-10-22 | Add a broadcast mode to trunk(4). This mode sends frames on all | Pierre-Yves Ritschard |
| 2007-10-18 | There is no point for IP addresses on pflog(4) | Marco Pfatschbacher |
| 2007-10-14 | 'syncronize' -> 'synchronize'. From Diego Casati. | Kenneth R Westerback |
