summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2001-07-01Enable the ``machine foo'' commands under ddb.Miod Vallat
Add a ``machine prom'' command, which returns to the BUG, like mvme68k has.
2001-07-01fix build by including two pieces of libroken directly into libkrb5.Dale Rahn
If this actually worked correctly before, the minor would have been incremented.
2001-07-01when you support kerberosV, you apparently need to also link in the 12Theo de Raadt
other libraries that it's tentacles lead to. This is just disgusting, and are going to pressure the KTH people to fix this. It's unmaintainable. kerberosV and kerberosIV even have cross dependencies. It's insane. patch developed at the same time by drahn and I
2001-07-01Add PF example and text; openbsd@davidkrause.comAngelos D. Keromytis
2001-07-01Appeared in 3.0, not 2.9; openbsd@davidkrause.comAngelos D. Keromytis
2001-07-01Add HISTORY and FILES section; openbsd@davidkrause.comAngelos D. Keromytis
2001-07-01Remember to end list.Angelos D. Keromytis
2001-07-01IPF cleanups; openbsd@davidkrause.comAngelos D. Keromytis
2001-07-01IPF->PF Xr reference; openbsd@davidkrause.comAngelos D. Keromytis
2001-07-01Remove IPF reference.Angelos D. Keromytis
2001-07-01full library lists, until this gets fixedTheo de Raadt
2001-07-01syncTheo de Raadt
2001-07-01add iopMichael Shalayeff
2001-07-01Remove warnings from non-DDEBUG case; angelos told me.Niklas Hallqvist
2001-07-01ISAKMP configuration, a.k.a IKECFG or "mode-config", protocol implementation.Niklas Hallqvist
Disabled, has no configuration mechanism yet. This will be used for roaming users, who are going to get parameters like IP-address and nameserver from its peer, very much like DHCP, but securily inside an ISAKMP connection and still in time before negotiation of IPsec connections. You may see stylistic fixes in this commit too. Add some not yet used Makefile magic to deal with DNSSEC- enabled OpenSSL too. The IKECFG code work was sponsered by Gatespace Inc. Thank you! Configuration will come very soon, btw.
2001-07-01strtol strictness. Style. Do not use dst end on an unconnected socket.Niklas Hallqvist
This should fix the IPv6 work for this round, There has been code by ho@ too in most my recent commits, we did this on Boston Logan airport, on our way home from !c2k1, the OpenBSD hackathon.
2001-07-01build iop and iopspMichael Shalayeff
2001-07-01add iop(4) and iopsp(4) from netbsdMichael Shalayeff
2001-07-01s/cdev_gen_ipf/cdev_pf_init/ ;openbsd@davidkrause.comAngelos D. Keromytis
2001-07-01More Style police, but also sane checking of addressNiklas Hallqvist
family vs stated ID-type.
2001-07-01strict strtol checking. text2sockaddr/sockaddr2text implementationsNiklas Hallqvist
for systems without get{addr,name}info calls. Some style police.
2001-07-01StyleNiklas Hallqvist
2001-07-01Style policeNiklas Hallqvist
2001-07-01Regression test for isakmpd utility functions, initially just text2sockaddr.Niklas Hallqvist
2001-07-01Start support for IPv6 addresses in policy.Angelos D. Keromytis
2001-07-01Set size correctly for IPv6 Phase 1 IDs.Angelos D. Keromytis
2001-07-01Debug information for IDs.Angelos D. Keromytis
2001-07-01Return the right length for address IDs.Angelos D. Keromytis
2001-07-01Add port ranges to the rdr directive. Connections can be redirectedKjell Wooding
to either a range of the same size, or a single port. Redirects between ranges of different sizes are not supported. Eg: rdr dc0 10.0.0.0/24 port 60000:61000 -> 127.0.0.1 port 65530:* proto udp rdr xl0 0.0.0.0/0 port 6660:6669 -> 127.0.0.1 port 6667 proto tcp This replaces the wildcard port patch (when port = 0), as it should no longer be necessary. ok dhartmei@
2001-07-01Always print filter statistics, even when the filter is disabled.Kjell Wooding
2001-07-01Finish with posixifying command options. Now both "pfctl -Fs" andKjell Wooding
"pfctl -F states" work. Changed -[Fs]S to -[Fs] info (or -[Fs]i) based on an earlier conversation with theo. Added -[Fs] "all" to show or flush everything Fixup some man page pastos in the process
2001-07-01Get the 'default:' case right too.Hakan Olsson
2001-07-01Teach ipsec_decode_ids about IPv6. More error checking, some better log msgs.Hakan Olsson
2001-07-01for ICMP error messages refering to TCP packets, only use the first 8 bytes ↵Daniel Hartmeier
of the TCP header. drop ackskew test and th_sum update.
2001-07-01pf is major 39 on powerpcDaniel Hartmeier
2001-07-01Initialization infrastruture for pf. Based on initial patchesKjell Wooding
by ian@, and much input and mangling from theo.
2001-07-01Add missing space in debug message.Angelos D. Keromytis
2001-07-01Fix length check, add some more sanity checks on INET6.Angelos D. Keromytis
2001-07-01KNF, and add DPRINTFs all over the place.Angelos D. Keromytis
2001-07-01Eliminate IPv4 dependency.Angelos D. Keromytis
2001-07-01Remove inaccurate "Assumes IPv4" comments.Angelos D. Keromytis
2001-07-01Pass the right arguments to getnameinfo()Angelos D. Keromytis
2001-07-01Fix remote_negotiation_address attribute; fix sockaddr2text() returnAngelos D. Keromytis
value when zero-filling; log_error()->log_print() consistently.
2001-07-01Don't try to delete unestablished SPIs.Angelos D. Keromytis
2001-07-01More prototype/header file cleanup.Dale Rahn
2001-07-01Properly identify the PBG4 keyboard, US keyboard at least.Dale Rahn
2001-06-30adress -> address; ok markus@Kevin Steves
2001-06-30Default login style is now krb4-or-pwd, not krb-or-pwd.Todd C. Miller
2001-06-30Repair 197 support (oops)Miod Vallat
2001-06-30Get root filehandle via nfs_root.Constantine Sapuntzakis
Fix problem with diskless clients
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-17 04:37:22 +0000