index
:
wireguard-openbsd
jd/histogram
jd/queueboosts
jd/simplify-queueing
master
WireGuard implementation for the OpenBSD kernel
Matt Dunwoodie
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
sys
/
net
/
pfvar.h
(
follow
)
Commit message (
Expand
)
Author
Age
Files
Lines
*
Add some more reason counters and use them instead of overloading the
dhartmei
2005-01-30
1
-2
/
+18
*
Define defaults for the timeouts ensure consistency between kernel
mcbride
2005-01-05
1
-1
/
+22
*
Introduce 'set skip on <ifspec>' to support a list of interfaces where no
dhartmei
2004-12-22
1
-1
/
+7
*
allow pf to filter on route labels
henning
2004-12-10
1
-2
/
+8
*
re-commit mcbride@'s 'flush global', this time without the breakage in
dhartmei
2004-12-07
1
-2
/
+5
*
tree does not compile, spotted by dlg (not obvious how to fix)
deraadt
2004-12-07
1
-13
/
+9
*
Change the default for 'overload <table> flush' to flush only states from the
mcbride
2004-12-07
1
-9
/
+13
*
Add kernel code to keep track of tcp connections which have completed
mcbride
2004-12-04
1
-1
/
+46
*
Fix for PR3983
mcbride
2004-11-16
1
-1
/
+2
*
Implement "no scrub" to allow exclusion of specific traffic from scrub rules.
aaron
2004-09-21
1
-2
/
+2
*
remove PF_FORWARD (which was introduced by ipv6 reass-on-scrub).
itojun
2004-07-12
1
-2
/
+2
*
backout IPv6 reass-on-scrub patch (more work needs to be done).
itojun
2004-07-11
1
-2
/
+2
*
re-introduce PF_INOUT and move PF_FORWARD def to the end.
itojun
2004-06-25
1
-2
/
+2
*
IPv6 reassembly on "scrub" directive.
itojun
2004-06-25
1
-3
/
+3
*
Get rid of pf_test_eh() wrapper.
mcbride
2004-06-21
1
-5
/
+3
*
Remove DIOCBEGINRULES, DIOCCOMMITRULES, DIOCBEGINALTQS, DIOCCOMMITALTQS,
cedric
2004-06-14
1
-7
/
+1
*
rename struct pf_rule_addr member 'not' to 'neg', as 'not' is a reserved
dhartmei
2004-06-10
1
-4
/
+4
*
Allow recursive anchors (anchors within anchors, up to 64
dhartmei
2004-05-19
1
-36
/
+27
*
pf_cksum_fixup() was called without last argument from normalization,
dhartmei
2004-05-11
1
-1
/
+3
*
Use RFC1323 PAWS timestamps as a logical extension to the conventional TCP
frantzen
2004-05-05
1
-8
/
+20
*
make return-rst work on pure bridges. ok dhartmei@ henning@ mcbride@
cedric
2004-04-28
1
-1
/
+5
*
validate the sequence numbers on TCP resets are an exact match. check is only
frantzen
2004-04-27
1
-3
/
+6
*
anchor refcounting. ok dhartmei@ mcbride@
cedric
2004-04-26
1
-2
/
+2
*
get rid of a complete state tree walk at state expire while in splnet()
pb
2004-04-25
1
-1
/
+2
*
Add "probability xxx" rule modifier. ok deraadt@
cedric
2004-04-24
1
-1
/
+2
*
Support for best effort bulk transfers of states when pfsync syncif is
mcbride
2004-03-22
1
-1
/
+6
*
Make pfsync deal with clearing states bound to a group or interface (eg
mcbride
2004-02-20
1
-1
/
+2
*
Makes pfctl -Fs and pfctl -w works with the optional -i specifier.
cedric
2004-02-19
1
-2
/
+3
*
the 2nd round of the qid assignment change.
kjc
2004-02-19
1
-3
/
+4
*
KNF
dhartmei
2004-02-10
1
-7
/
+7
*
KNF
henning
2004-02-10
1
-9
/
+9
*
Fix a number of bugs with setting pool limits which I introduced with
mcbride
2004-02-04
1
-1
/
+3
*
Many improvements to the handling of interfaces in PF.
cedric
2003-12-31
1
-50
/
+161
*
ryan left a few for me ;-)
henning
2003-12-15
1
-4
/
+4
*
Add initial support for pf state synchronization over the network.
mcbride
2003-12-15
1
-7
/
+20
*
Add support to track stateful connections by source ip. This allows us
mcbride
2003-12-15
1
-6
/
+56
*
Move PF interface code to new net/pf_if.c
cedric
2003-12-12
1
-5
/
+5
*
Fix PR3587 and other related problems with NAT and table stats.
cedric
2003-12-11
1
-1
/
+4
*
Add 'no-sync' state option to prevent state transition messages for states
mcbride
2003-11-08
1
-1
/
+2
*
Remove remenants of pf_tree stuff that I missed.
mcbride
2003-10-31
1
-2
/
+2
*
Build state search indexes directly on pf_state instead of pf_tree_node.
mcbride
2003-10-25
1
-16
/
+15
*
Rearchitecture of the userland/kernel IOCTL interface for transactions.
cedric
2003-09-26
1
-1
/
+21
*
pf spelling police
david
2003-08-22
1
-2
/
+2
*
KNF
henning
2003-08-22
1
-2
/
+2
*
don't expose pf_osfp_fingerprint() to ! _KERNEL. tcpdump et al use
frantzen
2003-08-22
1
-1
/
+3
*
Add Michal Zalewski's p0f v2 style passive OS fingerprinting to PF.
frantzen
2003-08-21
1
-2
/
+125
*
This patch remove the restriction that tables cannot be used in routing or
cedric
2003-08-09
1
-2
/
+8
*
make pf_match take u_int32_t instead of u_int16_t
henning
2003-08-07
1
-2
/
+2
*
Make table tickets per-ruleset instead of global.
cedric
2003-07-31
1
-5
/
+7
*
Simplify struct pf_pooladdr to include struct pf_addr_wrap directly
cedric
2003-07-19
1
-2
/
+2
[next]