| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | When using a pf rule with both nat-to and rdr-to, it could happen |   bluhm | 2015-10-15 | 1 | -3/+6 |
| * | - pf_insert_src_node(): global argument (arg6) is useless, function |   sashan | 2015-10-13 | 1 | -3/+2 |
| * | A recently added sanity check panic in pf_postprocess_addr() was |   jsg | 2015-08-03 | 1 | -2/+2 |
| * | Add some panics to default paths where code later assumes a non default | jsg | 2015-07-20 | 1 | -1/+3 |
| * | msg.mpi | sashan | 2015-07-18 | 1 | -1/+7 |
| * | INET/INET6 address family check should be unified in PF | sashan | 2015-07-18 | 1 | -2/+8 |
| * | fix the indentation of a block of code, no binary change | jsg | 2015-07-17 | 1 | -16/+16 |
| * | Expand ancient NTOHL/NTOHS/HTONS/HTONL macros. |   mpi | 2015-07-16 | 1 | -9/+9 |
| * | Fix pf_map_addr() not to cause dividing by 0. This fixes problem when |   yasuoka | 2015-06-03 | 1 | -5/+17 |
| * | Remove some includes include-what-you-use claims don't | jsg | 2015-03-14 | 1 | -2/+1 |
| * | init a potentially uninitialised var in pf_postprocess_addr | jsg | 2015-01-06 | 1 | -2/+2 |
| * | unifdef INET in net code as a precursor to removing the pretend option. |   tedu | 2014-12-19 | 1 | -7/+1 |
| * | Support source-hash and random with tables and dynifs; not just pools. |   reyk | 2014-12-19 | 1 | -18/+49 |
| * | Comment is no longer true, remove it. |   mcbride | 2014-12-19 | 1 | -4/+1 |
| * | use siphash for pf_lb. for ipv6, we stretch it out a bit, but good enough. | tedu | 2014-12-18 | 1 | -38/+20 |
| * | move arc4random prototype to systm.h. more appropriate for most code | tedu | 2014-11-18 | 1 | -2/+1 |
| * | Split the logic for the ICMP and ICMP6 case in pf_get_sport(). The | bluhm | 2014-11-10 | 1 | -5/+14 |
| * | remove uneeded route.h includes | jsg | 2014-09-08 | 1 | -5/+1 |
| * | fix logging strings (correct function name via __func__ + a typo) |   blambert | 2014-08-14 | 1 | -10/+8 |
| * | Fewer <netinet/in_systm.h> ! | mpi | 2014-07-22 | 1 | -2/+1 |
| * | better indentation; no functional change |   mikeb | 2014-07-02 | 1 | -68/+69 |
| * | translate icmpv6 echo id's the same way we do for icmpv4; ok henning | mikeb | 2013-10-30 | 1 | -2/+2 |
| * | add a comment describing why do we call pf_map_addr again if port | mikeb | 2013-10-30 | 1 | -1/+5 |
| * | Remove the number of in6_var.h inclusions by moving some functions and | mpi | 2013-10-24 | 1 | -3/+1 |
| * | Remove the number of in_var.h inclusions by moving some functions and | mpi | 2013-10-23 | 1 | -2/+1 |
| * | The header file netinet/in_var.h included netinet6/in6_var.h. This | bluhm | 2013-10-17 | 1 | -1/+2 |
| * | no need for a lot of code to include proc.h | tedu | 2013-03-28 | 1 | -2/+1 |
| * | make sure the entry from tree_src_tracking is still in the pool; |   markus | 2012-12-29 | 1 | -23/+78 |
| * | reset the counter in case its current value has been removed | markus | 2012-12-29 | 1 | -5/+16 |
| * | pass pf_pool directly to pfr_pool_get(); simplifies the API; | markus | 2012-12-29 | 1 | -64/+14 |
| * | Enable support for the 'weight' keyword in the 'least-states' |   zinke | 2012-07-09 | 1 | -6/+28 |
| * | The kernel did not compile without INET6. Put some #ifdefs into | bluhm | 2012-02-03 | 1 | -1/+5 |
| * | Since the IPv6 madness is not enough introduce NAT64 -- which is actually |   claudio | 2011-10-13 | 1 | -5/+139 |
| * | Fix various format string types to as a minimum match the width of the |   miod | 2011-09-18 | 1 | -2/+2 |
| * | Make sure we use the right tbl/dyn pointer to check the pfrkt_refcntcost; | mcbride | 2011-07-29 | 1 | -7/+17 |
| * | Add support for weighted round-robin in load balancing pools and tables. | mcbride | 2011-07-27 | 1 | -18/+57 |
| * | bring in least-states load balancing algorithm | zinke | 2011-07-03 | 1 | -10/+190 |
| * | exclude link local address from the dynamic interface address pool | mikeb | 2011-05-17 | 1 | -3/+12 |
| * | stuff nsaddr/ndaddr/nsport/ndport (addrs/ports after NAT, used a lot while |   henning | 2010-06-27 | 1 | -42/+37 |
| * | pf_get_sport() picks a random port from the port range specified in a |   sthen | 2010-02-04 | 1 | -19/+24 |
| * | Convert pf debug logging to using log()/addlog(), a single standardised | mcbride | 2010-01-18 | 1 | -15/+13 |
| * | First pass at removing the 'pf_pool' mechanism for translation and routing | mcbride | 2010-01-12 | 1 | -58/+27 |
| * | fix sticky-address - by pretty much re-implementing it. still following | henning | 2009-12-14 | 1 | -23/+30 |
| * | rtables are stacked on rdomains (it is possible to have multiple routing | claudio | 2009-11-03 | 1 | -4/+7 |
| * | Fix static-port, found by jmc@. ok henning@. | sthen | 2009-09-07 | 1 | -2/+3 |
| * | the diff theo calls me insanae for: | henning | 2009-09-01 | 1 | -257/+55 |
| * | move the "pf_map_addr: selected address" printf up to -xnoisy. | sthen | 2009-06-24 | 1 | -2/+2 |
| * | Stricter state checking for ICMP and ICMPv6 packets: include the ICMP type | mcbride | 2009-03-05 | 1 | -4/+7 |
| * | bring back the NAT NOP fix, but this time right. | henning | 2009-02-18 | 1 | -1/+11 |
| * | revert pf.c r1.629 (which moved to this file) which was causing | sthen | 2009-02-12 | 1 | -10/+1 |
