Age | Commit message (Expand) | Author |
2003-01-01 | use a #define for the default state table size | Henning Brauer |
2003-01-01 | KNF | Henning Brauer |
2003-01-01 | KNF | Henning Brauer |
2003-01-01 | disable the CLSTATS flag for now, since it violates the O_RDONLY check. | Cedric Berger |
2003-01-01 | Behaves correctly when duplicate addresses are given in the same ioctl. | Cedric Berger |
2003-01-01 | Behaves properly when someone try to insert/delete the same table name | Cedric Berger |
2003-01-01 | Remove skip step for action (scrub vs. non-scrub), as scrub rules are | Daniel Hartmeier |
2003-01-01 | Fix breakage from PF_RULESET_MAX increase, regress tests match again. | Daniel Hartmeier |
2002-12-31 | Split scrub rules out from the filter rules in the kernel. | Ryan Thomas McBride |
2002-12-31 | don't overrun user-supplied buffer. from jinmei@kame, deraadt ok | Jun-ichiro itojun Hagino |
2002-12-31 | Use a default state table limit of 10000 entries. This is safe for all | Daniel Hartmeier |
2002-12-30 | Don't forget to copyout the time at which statistics got cleared. | Cedric Berger |
2002-12-30 | really count the number of deleted tables - obvious fix. | Cedric Berger |
2002-12-30 | KNF | Henning Brauer |
2002-12-30 | KNF | Henning Brauer |
2002-12-29 | Add support for radix tables for source and destination of PF rules. | Cedric Berger |
2002-12-27 | Bugfix and better error handling: | Ryan Thomas McBride |
2002-12-27 | Fixups for pf_route and pf_route6. | Ryan Thomas McBride |
2002-12-27 | Handle binat-anchor rules in pf_match_translation(), they don't have a | Daniel Hartmeier |
2002-12-27 | Initialize rt_ifp in newly allocated pf_state objects to NULL. | Daniel Hartmeier |
2002-12-26 | Prettier debug printing in pf_map_addr. | Ryan Thomas McBride |
2002-12-26 | Additional sanity checks for pf_route(). Please report when any of these | Daniel Hartmeier |
2002-12-23 | no need to htons the port, it's already in net order, since we swapped it bac... | Michael Shalayeff |
2002-12-23 | Change from array to single pf_pabuf (no longer need multiple buffers as | Ryan Thomas McBride |
2002-12-22 | pfioc_changealtq is not needed anymore; queues will eventually be | Ryan Thomas McBride |
2002-12-22 | Handle rdr rules with unspecified proxy ports correctly. Also don't | Ryan Thomas McBride |
2002-12-22 | mv PF_RULESET_MAX into the enum, slightly less confusing. | Ryan Thomas McBride |
2002-12-20 | replace struct assignment w/ bcopy w/ help and testing of millert@; henning@ ... | Michael Shalayeff |
2002-12-19 | Clear pf_state.nat_rule pointers when non-main nat rules are removed. | Daniel Hartmeier |
2002-12-19 | Replace skip step calculation so it scales O(n) instead of O(n*n). | Daniel Hartmeier |
2002-12-19 | fix 'no nat/rdr/binat' evaluation. from mcbride@, slightly modified :) | Daniel Hartmeier |
2002-12-19 | Initialize pf_state.nat_rule to NULL if there's no translation used. | Daniel Hartmeier |
2002-12-18 | Store translation rule pointer in state entries, so pfctl -vsn can print | Daniel Hartmeier |
2002-12-18 | KNF | Henning Brauer |
2002-12-18 | little style | Henning Brauer |
2002-12-18 | When logging packets matched by rules within anchors, use the anchor rule | Daniel Hartmeier |
2002-12-18 | KNF | Henning Brauer |
2002-12-18 | big KNF round | Henning Brauer |
2002-12-18 | Pass skip step values through ioctl interface, pfctl -vvsr shows them, | Daniel Hartmeier |
2002-12-18 | KNF | Henning Brauer |
2002-12-18 | Match the rule protocol against the actual protocol of the packet, not just | Ryan Thomas McBride |
2002-12-17 | Merge pf_nat/pf_binat/pf_rdr structs into pf_rule. Simplifies code, allows | Ryan Thomas McBride |
2002-12-16 | add options for 2 more queueing disciplines, PRIQ and HFSC. | Kenjiro Cho |
2002-12-13 | add pqueue and pqid to pf_rule. | Henning Brauer |
2002-12-12 | Pastos in pf_compare_pool(); dhartmei@, mcbride@ ok. | Aaron Campbell |
2002-12-12 | minor KNF | Henning Brauer |
2002-12-11 | Use m_copym2 to copy the whole mbuf (cluster included) and not | Federico G. Schwindt |
2002-12-11 | unpee | Michael Shalayeff |
2002-12-10 | renumber the get/set debug ioctls for they conflict w/ ppp, we do not keep th... | Michael Shalayeff |
2002-12-10 | check IFF_RUNNING early in bstp_transmit_tcn; from netbsd; ok jason@ | Markus Friedl |