summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2004-06-22The NAT-T drafts suggest we should drop incoming messages arriving onHakan Olsson
the old port (500) after we've switched to the new one.
2004-06-22Templates with unknown AS where always configured as ebgp peers even ifClaudio Jeker
they were ibgp ones. OK henning@
2004-06-22In draft-ietf-ipsec-nat-t-ike-01,02,03, NAT-D is payload 130. Rewrite a bitHakan Olsson
to understand payloads in the private range. Also match a few "well-known" vendor-IDs. markus@ "looks ok".
2004-06-22Recognize NAT-T Keepalive packets. markus@ ok.Hakan Olsson
2004-06-22so we call realloc() on our pollfd array and the peer_l one when they shrunkHenning Brauer
to save memory... yet, that realloc call can fail with ENOMEM ;) don't shrink when (needed + reserve < allocated), but (needed + 2 * reserve < allocated) the longer term goal is of course to not fail at all when a shrink-realloc fails... but that's for later
2004-06-22use snprintf(3) instead of home-grown glue_strings() functionAnil Madhavapeddy
millert@ ok
2004-06-22more portable env passing testsMarkus Friedl
2004-06-22Add ipsec-nat-t at port 4500Hakan Olsson
2004-06-22Don't use time-based random number generationThorsten Lockert
ok millert@ deraadt@
2004-06-22acg.cg_nextfreeoff is already relative to &acg so don't subtractTodd C. Miller
&acg.cg_firstfield. Fixes a bogus "panic: cylinder group too big" I see sometimes when using mmap malloc. OK tholo@
2004-06-22Make the `filename' parameter to HASHFile() and HASHFileChunk() constJean-Francois Brousseau
ok pedro@, millert@
2004-06-22do not exit on RTM_DELADDR, dhclient can cause this itself under some rareHenning Brauer
circumstances. instead, exit on RTM_NEWADDR if, and only if, the new IP address is not a lease we got. theo ok
2004-06-22Switch amd64 to __HAVE_CPUINFOArtur Grabowski
deraadt@ ok
2004-06-22don't show .files by default in ls, add -a option to turn them back on;Damien Miller
ok markus
2004-06-22handle interface removals in the poll loop. ok henning@Can Erkin Acar
2004-06-22syncTheo de Raadt
2004-06-22Add additional retries in TUR to allow for tape devices to settle after a reset.Marco Peereboom
More informative failure message and silence "already open" message. ok krw@
2004-06-22Add additional retries in TUR to allow for tape devices to settle after a reset.Marco Peereboom
More informative failure message and silence "already open" message. ok krw@
2004-06-22introduce the new xetc set. ok deraadt@, miod@, krw@.Matthieu Herrb
2004-06-21First step towards more sane time handling in the kernel -- this changesThorsten Lockert
things such that code that only need a second-resolution uptime or wall time, and used to get that from time.tv_secs or mono_time.tv_secs now get this from separate time_t globals time_second and time_uptime. ok art@ niklas@ nordin@
2004-06-21When in_ifinit fails and we've created a new address, clean it up beforeRyan Thomas McBride
returning. ok markus@
2004-06-21Describe the [Default]:NAT-T-Keepalive configuration parameter.Hakan Olsson
2004-06-21Make printing of 802.11 fields consistent with the rest by printingTodd C. Miller
a colon (':') after the field name. Noticed by markus@, OK deraadt@
2004-06-21Enable NAT-T support.Hakan Olsson
2004-06-21Implement NAT-T keepalive messages.Hakan Olsson
2004-06-21another errno -> err in a structure. OK deraadt@Marco S Hyman
2004-06-21errno -> err in a structure. OK deraadt@Marco S Hyman
2004-06-21Put back the moving of schedstate_percpu into sched.h. This time exposeArtur Grabowski
it to userland so that i386 builds (other architectures didn't show the problem). deraadt@ ok
2004-06-21don't send UDP encapsulated packets w/o UDP header if encap is disabled; ok ho@Markus Friedl
2004-06-21don't accept SADB_X_EXT_UDPENCAP if encapsulation is disabled; ok ho@Markus Friedl
2004-06-21move the IFF_UP check to bpfwrite; ok canacar@Markus Friedl
2004-06-21add bounded attribute to some functions. anil tested and ok'edJun-ichiro itojun Hagino
2004-06-21document sort optionsDamien Miller
2004-06-21Make 'machine ddbcpu' work, and use CPU device number instead of APIC idAndreas Gunnarsson
KNF lesson and ok from niklas@
2004-06-21Pure luck has protected us from this bug until now: locore.SNiklas Hallqvist
%r9 are not saved over function calls and more we did not even want &proc0 as the old process in switch_search, but zero. Fixes bsd.rd.
2004-06-21prefix ls option flags with LS_Damien Miller
2004-06-21introduce sorting for ls, same options as /bin/ls; ok markus@Damien Miller
2004-06-21mark fatal and cleanup exit as __dead; ok markus@Damien Miller
2004-06-21make test successful even when /etc/services is changedJun-ichiro itojun Hagino
2004-06-21Use _ENTRY(CERROR) instead of CERROR so correct type info is generated.Dale Rahn
ok marc@
2004-06-21Update manpage to reflect changes in anchor namingMathieu Sauve-Frankel
ok beck@ claudio@
2004-06-21make it possble to use IPsec over link-local address (policy table usesJun-ichiro itojun Hagino
sin6_scope_id, IPsec porion uses embedded form). beck ok
2004-06-21Recognize cats as an arm machine. Dunno how this was missed before.Dale Rahn
2004-06-21Get rid of pf_test_eh() wrapper.Ryan Thomas McBride
ok cedric@ henning@
2004-06-21back out CPP change; obviously not tested. On at least arm, kills atTheo de Raadt
least ANSI_VARARGS deep inside the configure. Sorry -- try again.
2004-06-21udpencap_port should be taken from dst transportHakan Olsson
2004-06-21When switching from main to encap transport, copy dst port ifHakan Olsson
translated (NAT).
2004-06-21don't leak ipsec pmtu routes; with mpf@Markus Friedl
2004-06-21comment out -Wshadow for now, gcc2 sucks. noticed by markusAnil Madhavapeddy
2004-06-21Strip away umask bits in monitor_fopen(). hshoexer@ ok.Hakan Olsson
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-17 18:01:22 +0000