| Age | Commit message (Expand) | Author |
| 2013-10-20 | fix compiler warnings | christos |
| 2013-07-01 | PFIL_HOOKS is dead. | skrll |
| 2013-06-30 | Fix pf module build. Adjust pfil_remove_hook 3rd arguments. | njoly |
| 2013-06-30 | Update pf to pfil(9) changes. Missed in previous commit. | rmind |
| 2012-03-22 | remove KAME IPSEC, replaced by FAST_IPSEC | drochner |
| 2012-01-11 | protect "union sockaddr_union" from being defined twice by a CPP symbol | drochner |
| 2011-12-19 | do missing ipsec->kame_ipsec renames | drochner |
| 2011-12-17 | Separate /dev/random pseudodevice implemenation from kernel entropy pool | tls |
| 2011-11-28 | Remove arc4random() and arc4randbytes() from the kernel API. Replace | tls |
| 2011-11-19 | First step of random number subsystem rework described in | tls |
| 2011-08-30 | fix -Wshadow warnings when ALTQ is enabled | jmcneill |
| 2011-08-29 | build pf module with WARNS=3, and remove the need for -Wno-shadow | jmcneill |
| 2011-07-01 | fix an uninitialised variable problem. large-ish function, but i | mrg |
| 2011-05-18 | remove unused expression | drochner |
| 2011-05-11 | Commit the patch from | hauke |
| 2011-05-03 | Reduces the resources demanded by TCP sessions in TIME_WAIT-state using | dyoung |
| 2011-01-19 | make sure the "overload_tbl" member of "struct pf_rule" copied in | drochner |
| 2010-11-05 | ip_randomid: make mechanism MP-safe and more modular. | rmind |
| 2010-05-07 | Add support for pfs(8) | degroote |
| 2010-04-13 | Do not unload pf when enabled, not even manually. | ahoka |
| 2010-04-13 | change module class to driver. | ahoka |
| 2010-04-13 | Do not auto unload pf if it's enabled. | ahoka |
| 2010-04-12 | - Make the pf and pflog driver able to detach. | ahoka |
| 2010-04-12 | Spello in comment. | skrll |
| 2010-04-05 | Push the bpf_ops usage back into bpf.h. Push the common ifp->if_bpf | joerg |
| 2010-01-23 | Fix a typo introduced by the bpf linkage change. | minskim |
| 2010-01-19 | Redefine bpf linkage through an always present op vector, i.e. | pooka |
| 2009-12-30 | Replace uidinfo.h with kauth.h, should fix problems observed by tron@. | elad |
| 2009-12-30 | Use the right member to store gid in the non-NetBSD case. | elad |
| 2009-12-30 | Get uid/gid from the socket's credentials. | elad |
| 2009-12-06 | If pfi_address_add() has to extend the buffer, copy the data in the | dsl |
| 2009-10-03 | Move firewall/NAT policy back to respective subsystems (pf, ipf). | elad |
| 2009-09-14 | Import pfsync support from OpenBSD 4.2 | degroote |
| 2009-07-28 | Remove LKM code from pf. | minskim |
| 2009-06-16 | Reduce diff with OpenBSD. No functional change. | minskim |
| 2009-04-13 | Fix http://www.securityfocus.com/archive/1/502634, from OpenBSD. | christos |
| 2009-01-11 | make this compile | cegger |
| 2008-12-19 | use M_ZERO on malloc() and remove subsequent bzero(). | cegger |
| 2008-12-19 | pass M_NOWAIT instead of M_DONTWAIT to malloc. | cegger |
| 2008-11-07 | *** Summary *** | dyoung |
| 2008-10-11 | Move uidinfo to its own module in kern_uidinfo.c and include in rump. | pooka |
| 2008-06-22 | Wrap definition of pfil6_wrapper in #ifdef INET6. | peter |
| 2008-06-19 | remove pf42 branch's todo. | yamt |
| 2008-06-18 | merge yamt-pf42 branch. | yamt |
| 2008-04-15 | Make ip6 and icmp6 stats per-cpu. | thorpej |
| 2008-04-12 | Make IP, TCP, UDP, and ICMP statistics per-CPU. The stats are collated | thorpej |
| 2008-04-08 | Change ICMP6 stats from a structure to an array of uint64_t's. | thorpej |
| 2008-04-08 | Change TCP stats from a structure to an array of uint64_t's. | thorpej |
| 2008-04-07 | Change IP stats from a structure to an array of uint64_t's. | thorpej |
| 2008-04-06 | Change UDP stats from a structure to an array of uint64_t's. | thorpej |