| Age | Commit message (Expand) | Author |
|---|
| 2009-07-13 | Get rid of the token bucket filter. | Michele Marchetto |
| 2009-07-09 | Use MAXTTL instead of the hardcoded value. | Michele Marchetto |
| 2009-06-17 | Correctly handle the carp demote counter in all input cases. | Marco Pfatschbacher |
| 2009-06-09 | By default, don't accept IPv4 ICMP redirects. This behaviour can be | Stuart Henderson |
| 2009-06-08 | remove stray * from comment, probably a rewrapping artefact | Stuart Henderson |
| 2009-06-05 | Initial support for routing domains. This allows to bind interfaces to | Claudio Jeker |
| 2009-06-04 | the decision on wether a packet is to be delivered locally or forwarded | Henning Brauer |
| 2009-06-03 | add the basic infrastructure to take advantage of TCP and UDP receive | Christian Weisgerber |
| 2009-06-02 | Shuffle function declarations a bit; ipsp_kern doesn't actually exist, | Bret Lambert |
| 2009-06-02 | do the pf_pkt_addr_changed(m) magic just like gif etc | Henning Brauer |
| 2009-06-02 | satosin was already defined in in.h, no need to redefine it here | Bret Lambert |
| 2009-06-02 | 0 -> NULL | Bret Lambert |
| 2009-06-02 | Fix an off-by-one in the ddb-only debugging function tdb_hashstats. | Owain Ainsworth |
| 2009-05-18 | The routing table index rtableid has type unsigned int in the routing | Alexander Bluhm |
| 2009-03-15 | Introduce splsoftassert(), similar to splassert() but for soft interrupt | Miod Vallat |
| 2009-02-16 | pfsync v5, mostly written at n2k9, but based on work done at n2k8. | David Gwynne |
| 2009-01-30 | When don't-fragment packets need to get fragemnted some code tries to | Claudio Jeker |
| 2009-01-29 | Always zero the IP checksum field for packets and packet fragments | Christian Weisgerber |
| 2009-01-27 | In IPsec acquire mode, if the flow was configured for the "any" | Alexander Bluhm |
| 2008-12-24 | Fix two mbuf leaks in arpresolve. The first one happens on IFF_NOARP | Claudio Jeker |
| 2008-12-24 | report the number of packets that arp resolution is holding onto until it | David Gwynne |
| 2008-11-26 | call pf_pkt_addr_changed() when we do encapsulate | Henning Brauer |
| 2008-11-08 | fix macros up so they use the do { } while (/* CONSTCOND */ 0) idiom | David Gwynne |
| 2008-11-02 | Remove the M_ANYCAST6 mbuf flag by doing the detection all in ip6_input(). | Claudio Jeker |
| 2008-10-31 | Be way more strict in the number of packets allowed to be queued in the | Claudio Jeker |
| 2008-10-30 | Arpresolve could loose few packets during resolving an ethernet | Joerg Goltermann |
| 2008-10-28 | Do not keep retrying to send advertisements if there is | Marco Pfatschbacher |
| 2008-10-23 | use the correct idiom for NFOO things which come from "foo.h" files | Theo de Raadt |
| 2008-10-22 | #if INET => #ifdef INET | Marco Pfatschbacher |
| 2008-10-22 | filter ipv6 ipsec packets on enc0 (in and out), similar to ipv4; | Markus Friedl |
| 2008-10-16 | Kill M_HASFCS, it is not used in OpenBSD. If a ethernet chip returns the | Claudio Jeker |
| 2008-10-13 | disable the pcb linking for udp for the moment since there is some weird | Henning Brauer |
| 2008-10-10 | back out previous change. Another panic, not as frequent, and | David Hill |
| 2008-10-10 | Comment out statekey code to stop 'panic: soreceive 3', which | David Hill |
| 2008-09-28 | Ansify function declarations for gif(4). | Joel Sing |
| 2008-09-28 | Clear the PF state key before an IP packet exits a gif(4) tunnel, in order | Joel Sing |
| 2008-09-16 | remove another dead store. | Charles Longeau |
| 2008-09-15 | remove dead stores and newly created unused variables. | Charles Longeau |
| 2008-09-10 | Convert timeout_add() calls using multiples of hz to timeout_add_sec() | Bret Lambert |
| 2008-09-10 | icmp_reflect reuses mbufs. call pf_pkt_addr_changed to clear the state | Henning Brauer |
| 2008-09-09 | The pf state to pcb linking code change didn't account for the | Marco Pfatschbacher |
| 2008-09-03 | do not set the pkthdr mbuf state key pointer to the state key saved in the | Henning Brauer |
| 2008-09-03 | Prevent a possible overflow when the sum of all demotion counters | Marco Pfatschbacher |
| 2008-08-26 | we need to call pf_pkt_addr_changed here too. found by david | Henning Brauer |
| 2008-08-26 | call pf_pkt_addr_changed instead of manually clearing the pf state key ptr | Henning Brauer |
| 2008-08-21 | Assign the ip and ip6 pointers in ipsp_process_packet() only if a | Alexander Bluhm |
| 2008-07-29 | when detaching pcbs, also free the v6 output options so that we do not | Theo de Raadt |
| 2008-07-24 | ipsec is glued into the stack in a very weird way, violating all kinds | Henning Brauer |
| 2008-07-22 | Assign the struct size to sin6_len instead of sin6_family. | Alexander Bluhm |
| 2008-07-16 | link udp pcbs to pf states, same as done for tcp already | Henning Brauer |
