| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
| |
Notes:
svn path=/vendor-sys/pf/dist/; revision=185884
svn path=/vendor-sys/pf/4.2/; revision=185885; tag=vendor/pf-sys/4.2
|
|
|
|
|
|
|
|
|
| |
allow state reuse for tcp if both sides are in FIN_WAIT_2 and a new SYN
arrives; ok dhartmei, henning, feedback aaron
Notes:
svn path=/vendor-sys/pf/dist/; revision=181291
svn path=/vendor-sys/pf/4.1.001/; revision=181292; tag=vendor/pf-sys/4.1.001
|
|
|
|
| |
Notes:
svn path=/vendor-sys/pf/dist/; revision=181289
|
|
|
|
| |
Notes:
svn path=/vendor-sys/pf/dist/; revision=181288
|
|
|
|
|
| |
Notes:
svn path=/vendor-sys/pf/dist/; revision=171164
svn path=/vendor-sys/pf/4.1/; revision=171166; tag=vendor/pf-sys/4.1
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
mailing list onto the vendor branch:
pf_ioctl.c Revision 1.153 Sun Aug 7 11:37:33 2005 UTC by dhartmei
| verify ticket in DIOCADDADDR, from Boris Polevoy, ok deraadt@
pf_ioctl.c Revision 1.158 Mon Sep 5 14:51:08 2005 UTC by dhartmei
| in DIOCCHANGERULE, properly initialize table, if used in NAT rule.
| from Boris Polevoy <vapcom at mail dot ru>, ok mcbride@
pf.c Revision 1.502 Mon Aug 22 11:54:25 2005 UTC by dhartmei
| when nat'ing icmp 'connections', replace icmp id with proxy values
| (similar to proxy ports for tcp/udp). not all clients use
| per-invokation random ids, this allows multiple concurrent
| connections from such clients.
| thanks for testing to Rod Whitworth, "looks ok" markus@
pf.c Revision 1.501 Mon Aug 22 09:48:05 2005 UTC by dhartmei
| fix rdr to bitmask replacement address pool. patch from Max Laier,
| reported by Boris Polevoy, tested by Jean Debogue, ok henning@
Notes:
svn path=/vendor-sys/pf/dist/; revision=149882
|
|
|
|
|
| |
Notes:
svn path=/vendor-sys/pf/dist/; revision=145834
svn path=/vendor-sys/pf/3.7/; revision=145835; tag=vendor/pf-sys/3.7
|
|
|
|
|
|
|
|
| |
import. Sorry.
Notes:
svn path=/vendor-sys/pf/dist/; revision=133575
svn path=/vendor-sys/pf/3.5.004/; revision=133576; tag=vendor/pf-sys/3.5.004
|
|
|
|
|
|
|
|
|
|
| |
OpenBSD for various reasons.
Discussed with: yongari
Notes:
svn path=/vendor-sys/pf/dist/; revision=133571
svn path=/vendor-sys/pf/3.5.003/; revision=133572; tag=vendor/pf-sys/3.5.003
|
|
|
|
| |
Notes:
svn path=/vendor-sys/pf/dist/; revision=132298
|
|
|
|
| |
Notes:
svn path=/vendor-sys/pf/dist/; revision=130637
|
|
|
|
|
| |
Notes:
svn path=/vendor-sys/pf/dist/; revision=130610
svn path=/vendor-sys/pf/3.5/; revision=130612; tag=vendor/pf-sys/3.5
|
|
|
|
| |
Notes:
svn path=/vendor-sys/pf/dist/; revision=128841
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fix by dhartmei@ and mcbride@
1.433
Properly m_copyback() modified TCP sequence number after demodulation
1.432
Fix icmp checksum when sequence number modlation is being used.
Also fix a daddr vs saddr cut-n-paste error in ICMP error handling.
Fixes PR 3724
Notes:
svn path=/vendor-sys/pf/dist/; revision=128127
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Fix binat for incoming connections when a netblock (not just a single
address) is used for source in the binat rule. closes PR 3535, reported by
Karl O.Pinc. ok henning@, cedric@
- Fix a problem related to empty anchor rulesets, which could cause a kernel
panic.
Approved by: bms(mentor)
Notes:
svn path=/vendor-sys/pf/dist/; revision=127528
svn path=/vendor-sys/pf/3.4.001/; revision=127529; tag=vendor/pf-sys/3.4.001
|
|
Approved by: bms(mentor), core (in general)
Notes:
svn path=/vendor-sys/pf/dist/; revision=126258
svn path=/vendor-sys/pf/3.4/; revision=126260; tag=vendor/pf-sys/3.4
|