summaryrefslogtreecommitdiffstats
path: root/sys/net/pfvar.h (follow)
Commit message (Expand)AuthorAgeFilesLines
* Add some more reason counters and use them instead of overloading thedhartmei2005-01-301-2/+18
* Define defaults for the timeouts ensure consistency between kernelmcbride2005-01-051-1/+22
* Introduce 'set skip on <ifspec>' to support a list of interfaces where nodhartmei2004-12-221-1/+7
* allow pf to filter on route labelshenning2004-12-101-2/+8
* re-commit mcbride@'s 'flush global', this time without the breakage indhartmei2004-12-071-2/+5
* tree does not compile, spotted by dlg (not obvious how to fix)deraadt2004-12-071-13/+9
* Change the default for 'overload <table> flush' to flush only states from themcbride2004-12-071-9/+13
* Add kernel code to keep track of tcp connections which have completedmcbride2004-12-041-1/+46
* Fix for PR3983mcbride2004-11-161-1/+2
* Implement "no scrub" to allow exclusion of specific traffic from scrub rules.aaron2004-09-211-2/+2
* remove PF_FORWARD (which was introduced by ipv6 reass-on-scrub).itojun2004-07-121-2/+2
* backout IPv6 reass-on-scrub patch (more work needs to be done).itojun2004-07-111-2/+2
* re-introduce PF_INOUT and move PF_FORWARD def to the end.itojun2004-06-251-2/+2
* IPv6 reassembly on "scrub" directive.itojun2004-06-251-3/+3
* Get rid of pf_test_eh() wrapper.mcbride2004-06-211-5/+3
* Remove DIOCBEGINRULES, DIOCCOMMITRULES, DIOCBEGINALTQS, DIOCCOMMITALTQS,cedric2004-06-141-7/+1
* rename struct pf_rule_addr member 'not' to 'neg', as 'not' is a reserveddhartmei2004-06-101-4/+4
* Allow recursive anchors (anchors within anchors, up to 64dhartmei2004-05-191-36/+27
* pf_cksum_fixup() was called without last argument from normalization,dhartmei2004-05-111-1/+3
* Use RFC1323 PAWS timestamps as a logical extension to the conventional TCPfrantzen2004-05-051-8/+20
* make return-rst work on pure bridges. ok dhartmei@ henning@ mcbride@cedric2004-04-281-1/+5
* validate the sequence numbers on TCP resets are an exact match. check is onlyfrantzen2004-04-271-3/+6
* anchor refcounting. ok dhartmei@ mcbride@cedric2004-04-261-2/+2
* get rid of a complete state tree walk at state expire while in splnet()pb2004-04-251-1/+2
* Add "probability xxx" rule modifier. ok deraadt@cedric2004-04-241-1/+2
* Support for best effort bulk transfers of states when pfsync syncif ismcbride2004-03-221-1/+6
* Make pfsync deal with clearing states bound to a group or interface (egmcbride2004-02-201-1/+2
* Makes pfctl -Fs and pfctl -w works with the optional -i specifier.cedric2004-02-191-2/+3
* the 2nd round of the qid assignment change.kjc2004-02-191-3/+4
* KNFdhartmei2004-02-101-7/+7
* KNFhenning2004-02-101-9/+9
* Fix a number of bugs with setting pool limits which I introduced withmcbride2004-02-041-1/+3
* Many improvements to the handling of interfaces in PF.cedric2003-12-311-50/+161
* ryan left a few for me ;-)henning2003-12-151-4/+4
* Add initial support for pf state synchronization over the network.mcbride2003-12-151-7/+20
* Add support to track stateful connections by source ip. This allows usmcbride2003-12-151-6/+56
* Move PF interface code to new net/pf_if.ccedric2003-12-121-5/+5
* Fix PR3587 and other related problems with NAT and table stats.cedric2003-12-111-1/+4
* Add 'no-sync' state option to prevent state transition messages for statesmcbride2003-11-081-1/+2
* Remove remenants of pf_tree stuff that I missed.mcbride2003-10-311-2/+2
* Build state search indexes directly on pf_state instead of pf_tree_node.mcbride2003-10-251-16/+15
* Rearchitecture of the userland/kernel IOCTL interface for transactions.cedric2003-09-261-1/+21
* pf spelling policedavid2003-08-221-2/+2
* KNFhenning2003-08-221-2/+2
* don't expose pf_osfp_fingerprint() to ! _KERNEL. tcpdump et al usefrantzen2003-08-221-1/+3
* Add Michal Zalewski's p0f v2 style passive OS fingerprinting to PF.frantzen2003-08-211-2/+125
* This patch remove the restriction that tables cannot be used in routing orcedric2003-08-091-2/+8
* make pf_match take u_int32_t instead of u_int16_thenning2003-08-071-2/+2
* Make table tickets per-ruleset instead of global.cedric2003-07-311-5/+7
* Simplify struct pf_pooladdr to include struct pf_addr_wrap directlycedric2003-07-191-2/+2