| Age | Commit message (Expand) | Author | Files | Lines |
|---|
| 2020-01-15 | Enable pfctl(8) to recursively flush rules and tables from PF driver. The |   sashan | 1 | -16/+17 |
| 2019-03-07 | Remove pfctl_*_pool() remnants |   kn | 1 | -4/+1 |
| 2019-03-06 | Fix once rules | kn | 1 | -2/+2 |
| 2019-01-29 | Reuse copy_satopfaddr() when killing entries | kn | 1 | -1/+3 |
| 2018-09-06 | Remove unused af argument from unmask() | kn | 1 | -2/+2 |
| 2018-09-05 | Move AF-specific mask logic from callers into set_ipmask() | kn | 1 | -2/+2 |
| 2018-02-08 | make the watermarks/thresholds for entering and leaving syncookie mode when |   henning | 1 | -2/+5 |
| 2018-02-08 | show current synflood detection watermarks in pfctl -vsi, for the lack | henning | 1 | -2/+6 |
| 2018-02-06 | allow control over syncookies: set syncookies never/always/adaptive | henning | 1 | -1/+4 |
| 2017-11-25 | - patching use-after-free and innocent memory leak in pfctl_optimzie.c | sashan | 1 | -1/+2 |
| 2017-08-11 | add option -N (no domain resolution) |   benno | 1 | -3/+4 |
| 2016-07-18 | no more cbq_opts - CBQ is gone, ok mpi phessler benno | henning | 1 | -2/+1 |
| 2014-10-27 | Fixup incorrect expansion of the networking mask for dynamic interface |   mikeb | 1 | -1/+2 |
| 2014-08-23 | when you specify queues in a rule, make sure they have been defined. |   pelikan | 1 | -9/+11 |
| 2014-04-19 | remove altq bits here, too | henning | 1 | -14/+1 |
| 2013-10-12 | config bits for the bandwidth shaping part of the new queueing subsystem | henning | 1 | -1/+14 |
| 2013-08-01 | Provide local implementations of if_nametoindex(3) and if_indextoname(3) | mikeb | 1 | -1/+3 |
| 2011-12-03 | pfctl_set_hostid always returns 0; don't pretend otherwise and make it a |   mcbride | 1 | -2/+2 |
| 2011-11-23 | print ports as numbers by default; -P prints names instead | henning | 1 | -1/+2 |
| 2011-07-27 | Add support for weighted round-robin in load balancing pools and tables. | mcbride | 1 | -1/+2 |
| 2011-07-03 | bring in least-states load balancing algorithm |   zinke | 1 | -1/+2 |
| 2011-04-06 | Userland bits to allow PF to filter on the rdomain a packet belongs to. |   claudio | 1 | -1/+3 |
| 2010-06-25 | remove -m (merge). | henning | 1 | -2/+1 |
| 2010-03-23 | remove -A, -O, -R and -T load | henning | 1 | -8/+1 |
| 2010-01-18 | Convert pf debug logging to using log()/addlog(), a single standardised | mcbride | 1 | -1/+4 |
| 2010-01-12 | First pass at removing the 'pf_pool' mechanism for translation and routing | mcbride | 1 | -3/+5 |
| 2010-01-10 | In the non-optimized case, an address list containing "any" (ie. { any 10.0.0.1 }) |   deraadt | 1 | -1/+2 |
| 2009-09-01 | the diff theo calls me insanae for: | henning | 1 | -2/+2 |
| 2009-04-06 | 1) scrub rules are completely gone. | henning | 1 | -1/+4 |
| 2007-10-13 | in all these programs using the same pfctl-derived parse.y, re-unify the | deraadt | 1 | -3/+3 |
| 2006-10-31 | Allow a user to recursively print anchors including those without | mcbride | 1 | -1/+2 |
| 2006-10-31 | Allow pfctl ruleset optimizer to be controlled from the ruleset. | mcbride | 1 | -4/+7 |
| 2006-10-28 | Load all rules into memory before loading into the kernel, and add support | mcbride | 1 | -9/+10 |
| 2005-11-17 | for pfctl -f rules, open the file before resetting options. when opening |   dhartmei | 1 | -2/+2 |
| 2005-10-13 | unused parameters | henning | 1 | -2/+2 |
| 2005-10-13 | dead defines | henning | 1 | -5/+1 |
| 2005-02-07 | KNF; ok henning@ |   david | 1 | -2/+1 |
| 2005-01-05 | Modify pfctl behaviour so that 'set ...' options are no longer "sticky", ie. | mcbride | 1 | -1/+16 |
| 2004-12-22 | Introduce 'set skip on <ifspec>' to support a list of interfaces where no | dhartmei | 1 | -1/+2 |
| 2004-07-16 | 'pfctl -o' ruleset optimizer that doesnt change the meaning of the final ruleset |   frantzen | 1 | -2/+33 |
| 2004-05-19 | Allow recursive anchors (anchors within anchors, up to 64 | dhartmei | 1 | -6/+6 |
| 2004-04-14 | make antispoof work with dynamic addresses. ok dhartmei@ mcbride@ |   cedric | 1 | -1/+2 |
| 2004-02-10 | KNF | dhartmei | 1 | -3/+3 |
| 2004-01-29 | Clean up 'pfctl -s all' output. | mcbride | 1 | -1/+2 |
| 2003-12-31 | Many improvements to the handling of interfaces in PF. | cedric | 1 | -9/+8 |
| 2003-12-15 | Add initial support for pf state synchronization over the network. | mcbride | 1 | -1/+2 |
| 2003-12-15 | Add support to track stateful connections by source ip. This allows us | mcbride | 1 | -2/+3 |
| 2003-11-14 | allow the debuglevel to be set from pf.conf (set debug) | henning | 1 | -1/+2 |
| 2003-09-26 | Rearchitecture of the userland/kernel IOCTL interface for transactions. | cedric | 1 | -4/+4 |
| 2003-08-21 | Add Michal Zalewski's p0f v2 style passive OS fingerprinting to PF. | frantzen | 1 | -1/+18 |
