| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2020-01-28 | sbin/pfctl: replace TAILQ concatenation loop with TAILQ_CONCAT |   bket | 1 | -15/+4 |
| 2020-01-15 | Do the actual pfr_strerror() to pf_strerror() rename |   kn | 1 | -3/+3 |
| 2020-01-15 | Unify error message for nonexisting anchors | kn | 1 | -3/+3 |
| 2019-12-12 | Avoid optimizing empty rulesets | kn | 1 | -2/+5 |
| 2019-06-28 | When system calls indicate an error they return -1, not some arbitrary |   deraadt | 1 | -3/+3 |
| 2019-03-07 | Remove pfctl_*_pool() remnants | kn | 1 | -6/+1 |
| 2019-01-03 | Unbreak build under OPT_DEBUG | kn | 1 | -4/+2 |
| 2018-09-06 | Remove unused af argument from unmask() | kn | 1 | -6/+6 |
| 2017-11-25 | - patching use-after-free and innocent memory leak in pfctl_optimzie.c |   sashan | 1 | -30/+38 |
| 2017-11-25 | - pfctl rule optimizer: anchor name vs. anchor path mix up | sashan | 1 | -2/+2 |
| 2016-08-03 | A couple of "a->blah == a->blah" -> "a->blah == b->blah". |   krw | 1 | -3/+3 |
| 2015-01-21 | Include <netinet/in.h> before <net/pfvar.h>. In a future change when | deraadt | 1 | -4/+3 |
| 2014-09-13 | Replace all queue *_END macro calls except CIRCLEQ_END with NULL. |   doug | 1 | -2/+2 |
| 2013-11-22 | Whole bunch of (unsigned char) casts carefully added for ctype calls. | deraadt | 1 | -2/+2 |
| 2012-10-19 | rtableid must be BREAK instead of MERGE, otherwise the optimizer might |   henning | 1 | -2/+2 |
| 2011-12-19 | unbreak rule optimizer; ok henning, looks |   mikeb | 1 | -1/+2 |
| 2011-11-23 | print ports as numbers by default; -P prints names instead | henning | 1 | -2/+2 |
| 2011-07-27 | Add support for weighted round-robin in load balancing pools and tables. |   mcbride | 1 | -1/+2 |
| 2011-07-07 | Fold pf_test_fragment() into pf_test_rule(), reduce code and fixes | mcbride | 1 | -2/+2 |
| 2011-07-03 | bring in least-states load balancing algorithm |   zinke | 1 | -2/+2 |
| 2011-04-06 | Userland bits to allow PF to filter on the rdomain a packet belongs to. |   claudio | 1 | -1/+14 |
| 2010-03-23 | remove -A, -O, -R and -T load | henning | 1 | -6/+1 |
| 2010-01-12 | First pass at removing the 'pf_pool' mechanism for translation and routing | mcbride | 1 | -43/+8 |
| 2009-12-10 | plug some memory leaks; found by parfait, ok henning | deraadt | 1 | -1/+2 |
| 2009-11-23 | since "nat/rdr pass" are history natpass can go | henning | 1 | -3/+2 |
| 2009-11-22 | cleanup after the NAT changes. we used to have multiple rulesets (scrub, | henning | 1 | -13/+7 |
| 2009-10-28 | Add a dedicated pf pool for route options as suggested by henning, |   jsg | 1 | -1/+13 |
| 2009-09-01 | the diff theo calls me insanae for: | henning | 1 | -12/+24 |
| 2008-05-07 | allow setting TOS with scrub; ok mcbride, claudio |   markus | 1 | -1/+2 |
| 2008-05-06 | Add a counter to record how many states have been created by a rule. |   mpf | 1 | -2/+3 |
| 2008-01-26 | Create the automatic tables at the base of the anchor stack rather than | mcbride | 1 | -3/+4 |
| 2008-01-25 | Get rid of warning when compiling with OPT_DEBUG. | mcbride | 1 | -2/+2 |
| 2007-11-27 | typos; ok jmc@ |   martynas | 1 | -3/+3 |
| 2006-10-31 | Allow pfctl ruleset optimizer to be controlled from the ruleset. | mcbride | 1 | -3/+3 |
| 2006-10-28 | Load all rules into memory before loading into the kernel, and add support | mcbride | 1 | -32/+56 |
| 2006-10-25 | teach the optimizer about logif, with & ok frantzen | henning | 1 | -1/+2 |
| 2006-03-14 | implement a Unicast Reverse Path Forwarding (uRPF) check for pf(4) |   djm | 1 | -1/+3 |
| 2005-06-13 | make the packet and byte counters on rules and src nodes per direction, | henning | 1 | -3/+5 |
| 2005-05-26 | switch the max_src_{states,conn,conn_rate} from superblock breaks to superblock |   frantzen | 1 | -3/+4 |
| 2005-05-25 | make the remaining pf_rule fields named superblock BREAKs instead just letting | frantzen | 1 | -1/+13 |
| 2005-05-25 | make the optimizer safe in the presence of interface groups. they must act as | frantzen | 1 | -2/+42 |
| 2005-01-03 | don't merge a rule's source address into a table if we're already trying to | frantzen | 1 | -1/+3 |
| 2004-12-14 | &&/|| inversion would try to merge IP addresses with non-addresses into a | frantzen | 1 | -2/+2 |
| 2004-12-14 | add two warn() calls to make sure a warning message gets printed if one of | frantzen | 1 | -3/+7 |
| 2004-08-08 | spacing | deraadt | 1 | -9/+8 |
| 2004-07-16 | 'pfctl -o' ruleset optimizer that doesnt change the meaning of the final ruleset | frantzen | 1 | -0/+1558 |
