| Commit message (Expand) | Author | Age | Files | Lines |
* | change route-to so it sends packets to IPs instead of interfaces. |  dlg | 2021-02-01 | 1 | -11/+2 |
* | Sometimes a user ID was logged in pflog(4) although the logopt of |  bluhm | 2021-01-12 | 1 | -2/+2 |
* | getifaddrs() can return entries where ifa_addr is NULL. Check for this |  benno | 2020-12-29 | 1 | -2/+3 |
* | pf(4): use CLOCK_BOOTTIME to get time_uptime(9) in userspace |  cheloha | 2020-05-15 | 1 | -2/+2 |
* | Use -1 to indicate an invalid uid/gid, not UID_MAX and GID_MAX. |  millert | 2019-10-17 | 1 | -10/+8 |
* | When system calls indicate an error they return -1, not some arbitrary |  deraadt | 2019-06-28 | 1 | -2/+2 |
* | Fail on invalid netmasks when filling tables |  kn | 2019-03-30 | 1 | -2/+2 |
* | Reuse copy_satopfaddr() when killing entries |  kn | 2019-01-29 | 1 | -2/+1 |
* | The kernel does not set the address family for the socket addresses |  bluhm | 2018-09-16 | 1 | -4/+11 |
* | Avoid unneeded variable in gen_dynnode() |  kn | 2018-09-13 | 1 | -4/+2 |
* | Fix netmask regression in get_dynnode() |  kn | 2018-09-11 | 1 | -2/+2 |
* | Remove unused buffer from host() |  kn | 2018-09-11 | 1 | -10/+5 |
* | Merge host_v{4,6}() into simpler host_ip() |  kn | 2018-09-10 | 1 | -45/+28 |
* | Introduce copy_satopfaddr() |  kn | 2018-09-10 | 1 | -50/+26 |
* | More __func__ to fix error messages |  kn | 2018-09-07 | 1 | -4/+4 |
* | Remove wildcard address on loopack remnants |  kn | 2018-09-07 | 1 | -10/+3 |
* | Remove unused af argument from unmask() |  kn | 2018-09-06 | 1 | -5/+5 |
* | Move AF-specific mask logic from callers into set_ipmask() |  kn | 2018-09-05 | 1 | -18/+21 |
* | Use error label in host_if() |  kn | 2018-09-05 | 1 | -9/+6 |
* | Zap bits in host_v4(), use mask parameter |  kn | 2018-08-10 | 1 | -6/+5 |
* | Zap v4mask and v6mask in host() |  kn | 2018-07-31 | 1 | -11/+10 |
* | Simplify host() |  kn | 2018-07-30 | 1 | -29/+15 |
* | Use strtonum in host() |  kn | 2018-07-28 | 1 | -5/+6 |
* | Move duplicate code into new helper print_addr_str() |  kn | 2018-07-24 | 1 | -8/+2 |
* | Simplify getaddrinfo() error handling |  kn | 2018-07-24 | 1 | -8/+5 |
* | 'set delay' for the generic packet delay mechanism, ok benno sashan |  henning | 2018-07-10 | 1 | -11/+16 |
* | Add "listenrepv2" for MLDv2 Listener Reports from RFC3810 |  jca | 2018-07-10 | 1 | -2/+3 |
* | show current synflood detection watermarks in pfctl -vsi, for the lack |  henning | 2018-02-08 | 1 | -2/+7 |
* | The divert structure was using the port number to indicate that |  bluhm | 2017-11-28 | 1 | -17/+24 |
* | add a generic packet rate matching filter. allows things like |  henning | 2017-11-13 | 1 | -1/+4 |
* | expose the half-open tcp states counter, ok bluhm |  henning | 2017-08-14 | 1 | -1/+2 |
* | add option -N (no domain resolution) |  benno | 2017-08-11 | 1 | -7/+10 |
* | Since nearly 20 years the correct spelling of |  florian | 2017-08-03 | 1 | -2/+1 |
* | Allow HFSC classes to use flow queues |  mikeb | 2017-07-19 | 1 | -2/+3 |
* | Return time_uptime as value for when pf was enabled instead of |  patrick | 2017-06-01 | 1 | -4/+6 |
* | Fixup printing of queue bandwidth specifications |  mikeb | 2017-05-15 | 1 | -2/+2 |
* | Hook up FQ-CoDel to the tree and enable configuration in the pfctl(8) |  mikeb | 2017-05-15 | 1 | -10/+18 |
* | When using a /32 IPv4 interface address, pfctl(8) reports a 0.0.0.0 |  bluhm | 2016-10-26 | 1 | -1/+3 |
* | Let purge thread to remove once rules, not packets. |  sashan | 2016-09-03 | 1 | -1/+5 |
* | Add <time.h> for time(); sort <*.h> includes |  guenther | 2016-08-26 | 1 | -8/+9 |
* | interface should only be specified for root queues; found by jsg |  mikeb | 2015-09-03 | 1 | -2/+2 |
* | Do not assume that asprintf() clears the pointer on failure, which |  millert | 2015-06-03 | 1 | -4/+5 |
* | Rather than using 0xff as a placeholder for "don't check prio", use 0xff to |  sthen | 2015-02-14 | 1 | -3/+3 |
* | since we inherit prio (as in, the queuing priority) from outside sources, |  henning | 2015-02-10 | 1 | -1/+3 |
* | parse debug levels with strtonum, so that debug 1banana doesn't parse. |  tedu | 2015-02-07 | 1 | -3/+10 |
* | Replace <sys/param.h> with <limits.h> and other less dirty headers where |  deraadt | 2015-01-16 | 1 | -1/+2 |
* | Fixup incorrect expansion of the networking mask for dynamic interface |  mikeb | 2014-10-27 | 1 | -6/+26 |
* | Remove unnecessary netinet/in_systm.h include. |  lteo | 2014-10-25 | 1 | -2/+1 |
* | support "!received-on <interface>", ok dlg benno |  henning | 2014-01-20 | 1 | -2/+3 |
* | Whole bunch of (unsigned char) casts carefully added for ctype calls. |  deraadt | 2013-11-22 | 1 | -4/+4 |