summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2004-04-28Use the string version of system. Works with PAGER=less -s.Marc Espie
2004-04-28update to libevent 0.8; keep local changesBrad Smith
2004-04-28slightly more intricate selectors code.Marc Espie
2004-04-28Blech, SFS yields weird mount/df shit.Marc Espie
2004-04-28if a peer follows the extremely misgiuded path that the RFCs just barely allowHenning Brauer
2004-04-28FILE * leak; henning ja ja ja jaTheo de Raadt
2004-04-28clean up EXAMPLES;Jason McIntyre
2004-04-28typo from Jared Yanovich;Jason McIntyre
2004-04-28Improve a bit. ok markus@Otto Moerbeek
2004-04-28syncTheo de Raadt
2004-04-28manpage fixes in envpass stuff from Brian Poole (raj AT cerias.purdue.edu)Damien Miller
2004-04-28Put authpf user's IP addresses in the <authpf_users> table.Cedric Berger
2004-04-28support for AH flows and SAsMarkus Friedl
2004-04-28Unbreak the stuff that I commited first that was totaly broken. OK henning@Claudio Jeker
2004-04-28allow ah/esp spec with IKE, markus okHenning Brauer
2004-04-28do not give up on ESRCH, someone might have mucked with ipsecadm behindHenning Brauer
2004-04-28make this at least compileHenning Brauer
2004-04-28do not return herePhilipp Buehler
2004-04-28make sure send and reply are in sync; ok henningMarkus Friedl
2004-04-28Include db.h, not ndbm.h since this uses db routines and not ndbm.Todd C. Miller
2004-04-28Enable route refresh in the RDE. Now peer can request route refreshes.Claudio Jeker
2004-04-28keep track of which ipsec/md5 SAs we inserted - ESRCH on blind removalHenning Brauer
2004-04-28make return-rst work on pure bridges. ok dhartmei@ henning@ mcbride@Cedric Berger
2004-04-28Dont step into INET6 code, just because af != AF_INETPhilipp Buehler
2004-04-28remove mb_object*; ok teduMarkus Friedl
2004-04-28Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp.Ryan Thomas McBride
2004-04-28carp stats cleanup:Ryan Thomas McBride
2004-04-28Removing some erroneous \n junk and a little KNF. ok & tested krw@Marco Peereboom
2004-04-28remove dup file kvm_amd64 should be used.Marco S Hyman
2004-04-28prevent multiple auth methods to be specifiedHenning Brauer
2004-04-28spacingTheo de Raadt
2004-04-28spacingTheo de Raadt
2004-04-28remove XXX that is wrongTheo de Raadt
2004-04-28spacingHenning Brauer
2004-04-28spacingTheo de Raadt
2004-04-28correct yaccTheo de Raadt
2004-04-28don't load SAs into the kernel if IKE is used.Markus Friedl
2004-04-28keep route refresh counters into account when building sums, andHenning Brauer
2004-04-28pfsync stats fixups:Ryan Thomas McBride
2004-04-28add /etc/isakmpd/pubkeys/{fqdn,ipv4,ipv6,ufqdn}, theo markus okHenning Brauer
2004-04-28prefix the auth related defines by AUTH_, we had a name clash, markus okHenning Brauer
2004-04-28Make carp(4) aware of its physical interface:Ryan Thomas McBride
2004-04-28IPv6 support; ok beck@Damien Miller
2004-04-28point out that pfsync_send_bus and pfsync_sendout must be called in splnet()Philipp Buehler
2004-04-27teach printconf about all this shiny new ipsec stuffHenning Brauer
2004-04-27set conf.auth.methodod for md5, tooMarkus Friedl
2004-04-27ike before inHenning Brauer
2004-04-27generate a isakmpd (host) key; ok henning, deraadt, cedricMarkus Friedl
2004-04-27rename the ipsec struct to auth, move all tcpmd5 related fields in there, andHenning Brauer
2004-04-27clean up ifdef hellPhilipp Buehler