| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | rename all_state_flags to state_flags to finish the transition |   mikeb | 2012-07-26 | 1 | -4/+2 |
| * | With address family translation, the ip length of the quoted ip |   bluhm | 2012-07-10 | 1 | -5/+6 |
| * | rename prio in struct pf_rule and related structs to set_prio so it is |   henning | 2012-07-07 | 1 | -20/+20 |
| * | initialize 'reason' variable before passing it to the pflog_packet; | mikeb | 2012-06-26 | 1 | -3/+7 |
| * | Ignore/preserve ECN bits on ToS matching and scrubbing. |   mpf | 2012-05-12 | 1 | -2/+2 |
| * | SLIST_REMOVE_NEXT -> SLIST_REMOVE_AFTER for better consistency and |   naddy | 2012-04-11 | 1 | -2/+2 |
| * | Fix kernel compilation with pf but without pfsync pseudo-device by | mikeb | 2012-04-03 | 1 | -1/+70 |
| * | Improve the ICMPv6 direction check | mikeb | 2012-02-05 | 1 | -36/+75 |
| * | The kernel did not compile without INET6. Put some #ifdefs into | bluhm | 2012-02-03 | 1 | -21/+41 |
| * | improve icmp virtual id generation for ND and MLD packets so that | mikeb | 2012-01-28 | 1 | -9/+13 |
| * | try to lookup the icmp state based on a correct packet descriptor; | mikeb | 2012-01-28 | 1 | -3/+3 |
| * | Clean up the pf normalization code: | bluhm | 2012-01-26 | 1 | -8/+7 |
| * | Minor fixes for pf_walk_header6(): | bluhm | 2012-01-26 | 1 | -15/+17 |
| * | Remove dead assignments and newly created unused variables. |   chl | 2012-01-18 | 1 | -6/+2 |
| * | Fix trailing whitespace. | bluhm | 2012-01-17 | 1 | -2/+2 |
| * | Pass struct pf_pdesc to pf_walk_option6() and pf_walk_header6() to | bluhm | 2012-01-16 | 1 | -63/+55 |
| * | Calling pf_normalize_ip() from pf_setup_pdesc() was bad as the | bluhm | 2012-01-15 | 1 | -84/+62 |
| * | Just use pd->sidx and pd->didx to reverse the state key arguments | mpf | 2011-12-21 | 1 | -32/+12 |
| * | improve the icmp direction check to deal correctly with af-to states | mikeb | 2011-12-19 | 1 | -4/+10 |
| * | fixup af-to regression with match rules | mikeb | 2011-12-12 | 1 | -3/+3 |
| * | Kill unused IFCAP_IPSEC and IFCAP_IPCOMP. |   haesbaert | 2011-12-02 | 1 | -4/+3 |
| * | deprecate PFTM_UNTIL_PACKET. nothing in the tree uses it, and |   dlg | 2011-11-28 | 1 | -3/+1 |
| * | Apply route-to to deferred packet; without this the first packet of a |   mcbride | 2011-11-26 | 1 | -5/+1 |
| * | use time_uptime to set state creation values as time_second can be | dlg | 2011-11-25 | 1 | -3/+3 |
| * | add forgotten fixup for icmp6 id's when translating; ok henning | mikeb | 2011-10-21 | 1 | -1/+5 |
| * | Since the IPv6 madness is not enough introduce NAT64 -- which is actually |   claudio | 2011-10-13 | 1 | -123/+910 |
| * | remove inaccurate comment - we don't have state tableS any more, there is | henning | 2011-10-07 | 1 | -3/+1 |
| * | As requested by henning, move the mbuf pointer into struct pf_pdesc. | bluhm | 2011-09-28 | 1 | -213/+207 |
| * | As I have touched half of pf lines anyway, fix whitespaces now. | bluhm | 2011-09-22 | 1 | -20/+20 |
| * | Check the protocol header length for tcp, udp, icmp, icmp6 in | bluhm | 2011-09-21 | 1 | -2/+18 |
| * | pf_setup_pdesc() panics if address family is neither AF_INET nor | bluhm | 2011-09-20 | 1 | -25/+22 |
| * | Put kif and dir into pdesc an use this instead of passing the values | bluhm | 2011-09-20 | 1 | -128/+120 |
| * | Consolidate pf function parameters. Move off and hdrlen into pdesc | bluhm | 2011-09-19 | 1 | -161/+136 |
| * | Move the pdesc initialization code into pf_setup_pdesc(). Unify | bluhm | 2011-09-18 | 1 | -24/+22 |
| * | Move the call to pf_test_rule() for fragments that have not been | bluhm | 2011-09-18 | 1 | -20/+17 |
| * | The pd->ip_sum and pd->proto_sum fields are not needed. Replace | bluhm | 2011-09-17 | 1 | -17/+14 |
| * | move initialisation of pd->nsaddr and pd->ndaddr from pf_test_rule to | henning | 2011-09-17 | 1 | -15/+10 |
| * | Deduplicate IPv4 and IPv6 code that handles fragments that have not | bluhm | 2011-09-17 | 1 | -30/+19 |
| * | Add support for one shot rules that remove themselves from an active | mikeb | 2011-08-30 | 1 | -1/+4 |
| * | Remove redundant prototype for pf_socket_lookup(). | mpf | 2011-08-03 | 1 | -2/+1 |
| * | Add support for weighted round-robin in load balancing pools and tables. | mcbride | 2011-07-27 | 1 | -9/+3 |
| * | OS fingerprinting can only be done on rules that explicitly specify TCP | mcbride | 2011-07-24 | 1 | -6/+5 |
| * | Replace the IPv6 header walking loop in pf_test_state_icmp() with | bluhm | 2011-07-23 | 1 | -61/+76 |
| * | Sync 'block return' behaviour for ICMP packets with our IP stack: | mcbride | 2011-07-22 | 1 | -3/+6 |
| * | fix typos, martin pelikan | henning | 2011-07-22 | 1 | -4/+4 |
| * | If ipv4+icmp6 or ipv6+icmp packets were embedded into an icmp | bluhm | 2011-07-09 | 1 | -3/+15 |
| * | surprisingly, we use pf as classifier for the new priority queueing | henning | 2011-07-08 | 1 | -5/+26 |
| * | There were two loops in pf_setup_pdesc() and pf_normalize_ip6() | bluhm | 2011-07-07 | 1 | -76/+193 |
| * | Fold pf_test_fragment() into pf_test_rule(), reduce code and fixes | mcbride | 2011-07-07 | 1 | -214/+169 |
| * | add missing ifdefs for INET6; diff from form, ok henning, bluhm, claudio | mikeb | 2011-07-05 | 1 | -1/+11 |
