| Age | Commit message (Expand) | Author | Files | Lines |
| 2020-05-15 | pf(4): use CLOCK_BOOTTIME to get time_uptime(9) in userspace |  cheloha | 1 | -2/+2 |
| 2019-10-17 | Use -1 to indicate an invalid uid/gid, not UID_MAX and GID_MAX. |  millert | 1 | -10/+8 |
| 2019-06-28 | When system calls indicate an error they return -1, not some arbitrary |  deraadt | 1 | -2/+2 |
| 2019-03-30 | Fail on invalid netmasks when filling tables |  kn | 1 | -2/+2 |
| 2019-01-29 | Reuse copy_satopfaddr() when killing entries |  kn | 1 | -2/+1 |
| 2018-09-16 | The kernel does not set the address family for the socket addresses |  bluhm | 1 | -4/+11 |
| 2018-09-13 | Avoid unneeded variable in gen_dynnode() |  kn | 1 | -4/+2 |
| 2018-09-11 | Fix netmask regression in get_dynnode() |  kn | 1 | -2/+2 |
| 2018-09-11 | Remove unused buffer from host() |  kn | 1 | -10/+5 |
| 2018-09-10 | Merge host_v{4,6}() into simpler host_ip() |  kn | 1 | -45/+28 |
| 2018-09-10 | Introduce copy_satopfaddr() |  kn | 1 | -50/+26 |
| 2018-09-07 | More __func__ to fix error messages |  kn | 1 | -4/+4 |
| 2018-09-07 | Remove wildcard address on loopack remnants |  kn | 1 | -10/+3 |
| 2018-09-06 | Remove unused af argument from unmask() |  kn | 1 | -5/+5 |
| 2018-09-05 | Move AF-specific mask logic from callers into set_ipmask() |  kn | 1 | -18/+21 |
| 2018-09-05 | Use error label in host_if() |  kn | 1 | -9/+6 |
| 2018-08-10 | Zap bits in host_v4(), use mask parameter |  kn | 1 | -6/+5 |
| 2018-07-31 | Zap v4mask and v6mask in host() |  kn | 1 | -11/+10 |
| 2018-07-30 | Simplify host() |  kn | 1 | -29/+15 |
| 2018-07-28 | Use strtonum in host() |  kn | 1 | -5/+6 |
| 2018-07-24 | Move duplicate code into new helper print_addr_str() |  kn | 1 | -8/+2 |
| 2018-07-24 | Simplify getaddrinfo() error handling |  kn | 1 | -8/+5 |
| 2018-07-10 | 'set delay' for the generic packet delay mechanism, ok benno sashan |  henning | 1 | -11/+16 |
| 2018-07-10 | Add "listenrepv2" for MLDv2 Listener Reports from RFC3810 |  jca | 1 | -2/+3 |
| 2018-02-08 | show current synflood detection watermarks in pfctl -vsi, for the lack |  henning | 1 | -2/+7 |
| 2017-11-28 | The divert structure was using the port number to indicate that |  bluhm | 1 | -17/+24 |
| 2017-11-13 | add a generic packet rate matching filter. allows things like |  henning | 1 | -1/+4 |
| 2017-08-14 | expose the half-open tcp states counter, ok bluhm |  henning | 1 | -1/+2 |
| 2017-08-11 | add option -N (no domain resolution) |  benno | 1 | -7/+10 |
| 2017-08-03 | Since nearly 20 years the correct spelling of |  florian | 1 | -2/+1 |
| 2017-07-19 | Allow HFSC classes to use flow queues |  mikeb | 1 | -2/+3 |
| 2017-06-01 | Return time_uptime as value for when pf was enabled instead of |  patrick | 1 | -4/+6 |
| 2017-05-15 | Fixup printing of queue bandwidth specifications |  mikeb | 1 | -2/+2 |
| 2017-05-15 | Hook up FQ-CoDel to the tree and enable configuration in the pfctl(8) |  mikeb | 1 | -10/+18 |
| 2016-10-26 | When using a /32 IPv4 interface address, pfctl(8) reports a 0.0.0.0 |  bluhm | 1 | -1/+3 |
| 2016-09-03 | Let purge thread to remove once rules, not packets. |  sashan | 1 | -1/+5 |
| 2016-08-26 | Add <time.h> for time(); sort <*.h> includes |  guenther | 1 | -8/+9 |
| 2015-09-03 | interface should only be specified for root queues; found by jsg |  mikeb | 1 | -2/+2 |
| 2015-06-03 | Do not assume that asprintf() clears the pointer on failure, which |  millert | 1 | -4/+5 |
| 2015-02-14 | Rather than using 0xff as a placeholder for "don't check prio", use 0xff to |  sthen | 1 | -3/+3 |
| 2015-02-10 | since we inherit prio (as in, the queuing priority) from outside sources, |  henning | 1 | -1/+3 |
| 2015-02-07 | parse debug levels with strtonum, so that debug 1banana doesn't parse. |  tedu | 1 | -3/+10 |
| 2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where |  deraadt | 1 | -1/+2 |
| 2014-10-27 | Fixup incorrect expansion of the networking mask for dynamic interface |  mikeb | 1 | -6/+26 |
| 2014-10-25 | Remove unnecessary netinet/in_systm.h include. |  lteo | 1 | -2/+1 |
| 2014-01-20 | support "!received-on <interface>", ok dlg benno |  henning | 1 | -2/+3 |
| 2013-11-22 | Whole bunch of (unsigned char) casts carefully added for ctype calls. |  deraadt | 1 | -4/+4 |
| 2013-10-28 | use %d instead of %i in a few fprintf for clarity |  deraadt | 1 | -3/+3 |
| 2013-10-12 | config bits for the bandwidth shaping part of the new queueing subsystem |  henning | 1 | -2/+54 |
| 2013-08-01 | Provide local implementations of if_nametoindex(3) and if_indextoname(3) |  mikeb | 1 | -1/+33 |