summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
1999-03-31Merge with EOM 1.43Niklas Hallqvist
the SA replace flag
1999-03-31Merge with EOM 1.69Niklas Hallqvist
Add debugging. Provide a way to say an SA has been replaced wrt the flows. Do not free the flow information before calling the sysdep delete_spi routine, as it may use it.
1999-03-31Merge with EOM 1.51Niklas Hallqvist
Async PF_ENCAP messages might be handled earlier so recheck readability in the handler. Remove some XXX comments. Fix some byte order conversions in debugging output.
1999-03-31Merge with EOM 1.13Niklas Hallqvist
Documet IPSec SA flags
1999-03-31Merge with EOM 1.85Niklas Hallqvist
Mark replaced SAs as such. Move SA naming earlier. Reorder & comment funcs.
1999-03-31Merge with EOM 1.70Niklas Hallqvist
Do not deref after free, thanks ElectricFence
1999-03-31Merge with EOM 1.2Niklas Hallqvist
Append to LDADD and DPADD, not replace
1999-03-30the real thingTheo de Raadt
1999-03-30Crank MAX_START to 256 instead of making it dependent on MAX_TARGET andTodd C. Miller
SCSI_NCR_DFLT_TAGS
1999-03-30minor parser bugfix; amazing what you find when you get in the right mindsetTodd C. Miller
1999-03-30Point at cs.slcs_u.csu_ip instead of the just-copied ``cp''brian
when recalculating the ip checksum. cp is not guaranteed to be aligned. It now doesn't matter that cp isn't aligned as the caller does another mbuf_Alloc() regardless.
1999-03-30add obj target that works in conjuction with WRKOBJDIR;Marco S Hyman
code from op21@squish.org
1999-03-30Final changes for real 1.5.9 releaseTodd C. Miller
1999-03-30first shot at documenting bindNiels Provos
1999-03-30Finish repair of license file (old one still included here; now referIan Darwin
to new one), and update my email and the current FTP addresses.
1999-03-30Maintain a `necessary' marker to indicate that we *probably*brian
need to process a signal (usually a SIGALRM). Check to see if we need to process a signal both before *and* after calling select() as older (pre-2.0) versions of ppp used to. This handles the possibility that ppp may block at some point (maybe due to an open() of a misconfigured device). Previously, we'd potentially lock up in select(). The `necessary' marker reduces the increased signal checking overhead so that at full speed with no compression transferring an 83Mb file via a ``!ppp -direct'' device, we get a 1% throughput gain.
1999-03-30make option IPSEC imply option KEYNiklas Hallqvist
1999-03-29New multicast route setup styleNiklas Hallqvist
1999-03-29initgroups(3) should not spew to stderr; giles@nemeton.com.auTodd C. Miller
Also document the NGROUPS limit.
1999-03-29Only print "already up to date" if in verbose modeTodd C. Miller
1999-03-29sudo 1.5.9--fixes some parser bugsTodd C. Miller
1999-03-29syncTheo de Raadt
1999-03-29If we adjust our required ACCMAP due to a more restrictivebrian
ACCMAP being REQuested by the peer, also increment our FSM id so that we don't end up sending out a new REQ with the same ID and different data (the changed ACCMAP).
1999-03-29Ensure that the thing we're casting to struct ipbrian
is aligned for non-i386 architectures.
1999-03-29make it compileNiels Provos
1999-03-29remove references to header files that should not be shipped,Dale S. Rahn
previously were shipping machine specific header files for other processors in addition to the correct one.
1999-03-29add perl header files for recently added header files.Dale S. Rahn
remove perl headers files for files previously incorrectly installed.
1999-03-29powerpc does not support shared libraries and thus should not shipDale S. Rahn
link.h or dlfcn.h
1999-03-28inclusion protection; friesTheo de Raadt
1999-03-28ncurses-4.2-990327; just man page fixesTodd C. Miller
1999-03-28Increase the timeout and wait for ``PPP'' in the compuservebrian
example. Submitted by: MALCOLM BOFF <Malcolm_Boff@compuserve.com>
1999-03-27enable photurisd againNiels Provos
1999-03-27convert the kernel module to PFKEYv2, support for binding incoming andNiels Provos
outgoing SA-pairs, fix a bug in SPI generation. the daemon registers with pfkey but does not yet handle expiration or acquire messages. well, there are NO acquire messages at the moment, so dynamic keyed vpn or stuff does not work :-\ - all this done in canada. thanks again to dugsong and linh for the ride. linh is sleeping now.
1999-03-27add SADB_X_BINDSA to pfkey allowing incoming SAs to refer to an outgoingNiels Provos
SA to be used, use this SA in ip_output if available. allow mobile road warriors for bind SAs with wildcard dst and src addresses. check IPSEC AUTH and ESP level when receiving packets, drop them if protection is insufficient. add stats to show dropped packets because of insufficient IPSEC protection. -- phew. this was all done in canada. dugsong and linh provided the ride and company.
1999-03-27Upgrade to 2.5.4. Mopprobe is working again, and some linux support. -mojMats O Jansson
1999-03-27Fix rev 1.4Paul Janzen
1999-03-27use const where appropriate; jsm28@cam.ac.ukPaul Janzen
1999-03-27Disable the log file by default (logging, as opposed to scoring, should bePaul Janzen
done through dm).
1999-03-27Changes from FreeBSD: install score files, use random(), and be more carefulPaul Janzen
on exec.
1999-03-27Much nicer, less confusing than the previous version.Marc Espie
1999-03-26use stdlib; millertTheo de Raadt
1999-03-26Add bridge interface handlingNiklas Hallqvist
1999-03-26Add support for some 100Mbit PCMCIA cards.Federico G. Schwindt
Change the ne2000_detect parm list.
1999-03-26Buffer overflow fix (from FreeBSD)Paul Janzen
1999-03-26fix sizeof/strlen typo and limit scanf length; from FreeBSDPaul Janzen
1999-03-26add note about LVD support and change comment about NVRAMmjacob
1999-03-26Annoying little nigglet- apparently *some* Qlogic temporarily ignoremjacob
settings you've just sent them and return random values if you follow the set by a get. This causes problems when you latter run a Tag-enabled command when you've command tagged mode off.
1999-03-25Allow port ranges in ``alias port''.brian
1999-03-25roll internal revision levels and enable 1080 supportmjacob
1999-03-25synchMarc Espie