summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2000-01-11Document the new ipsec sysctl variables.Angelos D. Keromytis
2000-01-11Only use defaults if they have sane values.Angelos D. Keromytis
2000-01-10Don't enable UDMA modes for revisions of SiS 5513 < 0xd0Chris Cappuccio
The only revisions I know which don't actually support UDMA are 0x09 and below.. But the only revision I know which does support UDMA is 0xd0 (and presumably above that)
2000-01-10Sync w/NetBSD regarding Promise PDC20262 support (the Promise Ultra/66Chris Cappuccio
controller actually works now!) and Manuel Bouyer's copyright.
2000-01-10Document /kern/ipsecAngelos D. Keromytis
2000-01-10Document the blocknonip flag.Angelos D. Keromytis
2000-01-10Typos.Angelos D. Keromytis
2000-01-10Implement the blocknonip flagAngelos D. Keromytis
2000-01-10blocknonip flag -- use it on a per-interface basis to not accept fromAngelos D. Keromytis
and not forward to said interface traffic that's not IPv4/IPv6/ARP/ReverseARP
2000-01-10Big oops for non-IP SubjAltNames -- correct memcpy.Angelos D. Keromytis
2000-01-10document latest bugfixMarkus Friedl
2000-01-10syncTheo de Raadt
2000-01-10Remove PNIC driverJason Wright
2000-01-10handle OCLOSE for CHAN_INPUT_WAIT_DRAIN, i.e. do not drain buffer ifMarkus Friedl
peer is not going to read the data.
2000-01-10discard data for channel if state != CHAN_OUTPUT_OPEN, fixes lockupMarkus Friedl
2000-01-10Fix rc.vpn as suggested in PR#1052 (rmooney@iss.net); ipsecadm(8) doesAngelos D. Keromytis
indeed not accept the hexadecimal notation for netmasks anymore.
2000-01-10the theTheo de Raadt
2000-01-10the theTheo de Raadt
2000-01-10spellingTheo de Raadt
2000-01-10openbsd-ify further (surprising aaron did not catch these problems)Theo de Raadt
2000-01-10nits & styleHugh Graham
2000-01-10Add 10 new ipsec-related sysctl variables...they are currently underAngelos D. Keromytis
net.inet.ip; perhaps they should be moved under net.inet.ipsec or some such.
2000-01-10Fix wrong type of variable.Angelos D. Keromytis
2000-01-10Rename variable for consistency.Angelos D. Keromytis
2000-01-10Some new sysctl variables.Angelos D. Keromytis
2000-01-10Some more code for dealing with socket IPsec options.Angelos D. Keromytis
2000-01-10Place NULL arg on end of argv array only after all other args. mickey@ okimp
2000-01-10Remove unnecessary function prototype.Angelos D. Keromytis
2000-01-10Only setup an expiration for embryonic SAs ifAngelos D. Keromytis
net.inet.ip.ipsec-invalid-life >=0
2000-01-10Document net.inet.ip.ipsec-invalid-lifeAngelos D. Keromytis
2000-01-10Add net.inet.ip.ipsec-invalid-life, default value 60 seconds; theAngelos D. Keromytis
amount of time embryonic SAs will be kept before they have to be initialized by key management (this only affects automated key management).
2000-01-10No need for extern definition of pfkeyv2_acquire()Angelos D. Keromytis
2000-01-10externalize pfkeyv2_acquire()Angelos D. Keromytis
2000-01-10Document ip.ipsec-invalid-timeoutAngelos D. Keromytis
2000-01-10match Davicom DM9100 and DM9102; tested by Joff Thyer <jsthyer@uncg.edu>.Jason Wright
2000-01-101) Setup a silent TDB expiration for embryonic SAs.Angelos D. Keromytis
2) Fix check_ipsec_policy() to deal with v6 PCBs. 3) Fix ACL protocol check.
2000-01-10Fix some -Wall complaintsTodd C. Miller
pmap_enter() now takes an extra arg trapsignal() now takes a union sigval as the last arg A kbus kernel now links but is untested--much more remains to be done.
2000-01-10Add {v,p}addr_t and {v,p}size_t. kbus-specific code does not use themTodd C. Miller
yet, though.
2000-01-10move mul/umul into the kernel to match sparcTodd C. Miller
2000-01-10This is OpenBSD, not NetBSD.Todd C. Miller
2000-01-10dest should be on a seperate lineTheo de Raadt
2000-01-10more fluff to please newbiesTheo de Raadt
2000-01-10handle glob() return values better; netbsdTheo de Raadt
2000-01-10clarify greatlyTheo de Raadt
2000-01-10move `!' and `#' into their own section; fix dest; rm excess exampleTodd T. Fries
2000-01-10extra : in err(); impTheo de Raadt
2000-01-10Fix tdbi setup for TCP and UDP packets.Angelos D. Keromytis
2000-01-10clearly document comments and comment featuresTodd T. Fries
2000-01-10nroff errorTheo de Raadt
2000-01-10sync pcidevs and let the aeon driver match the Hi/Fn 7751Jason Wright
(Invertex's aeon used the Hi/Fn 7751 reference design)