| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2004-04-28 | Use the string version of system. Works with PAGER=less -s. | Marc Espie | |
| ho@ | |||
| 2004-04-28 | update to libevent 0.8; keep local changes | Brad Smith | |
| ok markus@ | |||
| 2004-04-28 | slightly more intricate selectors code. | Marc Espie | |
| Approved by at least sturm@ and fries@ | |||
| 2004-04-28 | Blech, SFS yields weird mount/df shit. | Marc Espie | |
| Non absolute mount points ? give me a break. Fix for ugly nonsense. Problem reported by David Mazieres. | |||
| 2004-04-28 | if a peer follows the extremely misgiuded path that the RFCs just barely allow | Henning Brauer | |
| to send a NOTIFICATION and thus ternminating the session when it sees a capability it doesn't support (who would guess: zebra does so), parse the data section of the notifcication to find out what what capabilties it didn't like and do not advertise them the next time the session gets up. In case we get a notification about unsupported capabilities with an empty data part (don't ask for RFCs... and guess who does that), disable capabilty announcement alltogether. claudio ok | |||
| 2004-04-28 | FILE * leak; henning ja ja ja ja | Theo de Raadt | |
| 2004-04-28 | clean up EXAMPLES; | Jason McIntyre | |
| ok pb@ | |||
| 2004-04-28 | typo from Jared Yanovich; | Jason McIntyre | |
| ok deraadt@ | |||
| 2004-04-28 | Improve a bit. ok markus@ | Otto Moerbeek | |
| 2004-04-28 | sync | Theo de Raadt | |
| 2004-04-28 | manpage fixes in envpass stuff from Brian Poole (raj AT cerias.purdue.edu) | Damien Miller | |
| 2004-04-28 | Put authpf user's IP addresses in the <authpf_users> table. | Cedric Berger | |
| ok deraadt@ dhartmei@ markus@ mcbride@ | |||
| 2004-04-28 | support for AH flows and SAs | Markus Friedl | |
| 2004-04-28 | Unbreak the stuff that I commited first that was totaly broken. OK henning@ | Claudio Jeker | |
| 2004-04-28 | allow ah/esp spec with IKE, markus ok | Henning Brauer | |
| 2004-04-28 | do not give up on ESRCH, someone might have mucked with ipsecadm behind | Henning Brauer | |
| our back, markus ok | |||
| 2004-04-28 | make this at least compile | Henning Brauer | |
| 2004-04-28 | do not return here | Philipp Buehler | |
| 2004-04-28 | make sure send and reply are in sync; ok henning | Markus Friedl | |
| 2004-04-28 | Include db.h, not ndbm.h since this uses db routines and not ndbm. | Todd C. Miller | |
| 2004-04-28 | Enable route refresh in the RDE. Now peer can request route refreshes. | Claudio Jeker | |
| OK henning@ | |||
| 2004-04-28 | keep track of which ipsec/md5 SAs we inserted - ESRCH on blind removal | Henning Brauer | |
| otherwise, markus ok | |||
| 2004-04-28 | make return-rst work on pure bridges. ok dhartmei@ henning@ mcbride@ | Cedric Berger | |
| 2004-04-28 | Dont step into INET6 code, just because af != AF_INET | Philipp Buehler | |
| Also comment #endif properly while being here ok mcbride@ | |||
| 2004-04-28 | remove mb_object*; ok tedu | Markus Friedl | |
| 2004-04-28 | Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp. | Ryan Thomas McBride | |
| ok markus@ pb@ | |||
| 2004-04-28 | carp stats cleanup: | Ryan Thomas McBride | |
| - convert counters to 64 bits - remove junk from netstat ok pb@ | |||
| 2004-04-28 | Removing some erroneous \n junk and a little KNF. ok & tested krw@ | Marco Peereboom | |
| 2004-04-28 | remove dup file kvm_amd64 should be used. | Marco S Hyman | |
| OK deraadt@ | |||
| 2004-04-28 | prevent multiple auth methods to be specified | Henning Brauer | |
| 2004-04-28 | spacing | Theo de Raadt | |
| 2004-04-28 | spacing | Theo de Raadt | |
| 2004-04-28 | remove XXX that is wrong | Theo de Raadt | |
| 2004-04-28 | spacing | Henning Brauer | |
| 2004-04-28 | spacing | Theo de Raadt | |
| 2004-04-28 | correct yacc | Theo de Raadt | |
| 2004-04-28 | don't load SAs into the kernel if IKE is used. | Markus Friedl | |
| 2004-04-28 | keep route refresh counters into account when building sums, and | Henning Brauer | |
| print route refresh counters in the neighbor view | |||
| 2004-04-28 | pfsync stats fixups: | Ryan Thomas McBride | |
| - convert counters to 64 bits - add dedicated counters for sanity checks added right before release - clean up netstat output | |||
| 2004-04-28 | add /etc/isakmpd/pubkeys/{fqdn,ipv4,ipv6,ufqdn}, theo markus ok | Henning Brauer | |
| 2004-04-28 | prefix the auth related defines by AUTH_, we had a name clash, markus ok | Henning Brauer | |
| 2004-04-28 | Make carp(4) aware of its physical interface: | Ryan Thomas McBride | |
| - If the physical interface goes down or the link goes down, the carp interface goes down as well. - We treat this like the preemption holdoff with pfsync. So if one of the carp interfaces is known to be bad (because the physical interface it's associated with is bad), all the other carp interfaces back off: they won't preempt, and their advskew goes to 240. ok cedric@ | |||
| 2004-04-28 | IPv6 support; ok beck@ | Damien Miller | |
| 2004-04-28 | point out that pfsync_send_bus and pfsync_sendout must be called in splnet() | Philipp Buehler | |
| ok mcbride@ | |||
| 2004-04-27 | teach printconf about all this shiny new ipsec stuff | Henning Brauer | |
| 2004-04-27 | set conf.auth.methodod for md5, too | Markus Friedl | |
| 2004-04-27 | ike before in | Henning Brauer | |
| 2004-04-27 | generate a isakmpd (host) key; ok henning, deraadt, cedric | Markus Friedl | |
| 2004-04-27 | rename the ipsec struct to auth, move all tcpmd5 related fields in there, and | Henning Brauer | |
| add a generic "method" field that expresses what method (none/md5sig/ipsec manual/ipsec ike) is in use markus ok | |||
| 2004-04-27 | clean up ifdef hell | Philipp Buehler | |
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |