summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2004-04-28Unbreak the stuff that I commited first that was totaly broken. OK henning@Claudio Jeker
2004-04-28allow ah/esp spec with IKE, markus okHenning Brauer
2004-04-28do not give up on ESRCH, someone might have mucked with ipsecadm behindHenning Brauer
2004-04-28make this at least compileHenning Brauer
2004-04-28do not return herePhilipp Buehler
2004-04-28make sure send and reply are in sync; ok henningMarkus Friedl
2004-04-28Include db.h, not ndbm.h since this uses db routines and not ndbm.Todd C. Miller
2004-04-28Enable route refresh in the RDE. Now peer can request route refreshes.Claudio Jeker
2004-04-28keep track of which ipsec/md5 SAs we inserted - ESRCH on blind removalHenning Brauer
2004-04-28make return-rst work on pure bridges. ok dhartmei@ henning@ mcbride@Cedric Berger
2004-04-28Dont step into INET6 code, just because af != AF_INETPhilipp Buehler
2004-04-28remove mb_object*; ok teduMarkus Friedl
2004-04-28Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp.Ryan Thomas McBride
2004-04-28carp stats cleanup:Ryan Thomas McBride
2004-04-28Removing some erroneous \n junk and a little KNF. ok & tested krw@Marco Peereboom
2004-04-28remove dup file kvm_amd64 should be used.Marco S Hyman
2004-04-28prevent multiple auth methods to be specifiedHenning Brauer
2004-04-28spacingTheo de Raadt
2004-04-28spacingTheo de Raadt
2004-04-28remove XXX that is wrongTheo de Raadt
2004-04-28spacingHenning Brauer
2004-04-28spacingTheo de Raadt
2004-04-28correct yaccTheo de Raadt
2004-04-28don't load SAs into the kernel if IKE is used.Markus Friedl
2004-04-28keep route refresh counters into account when building sums, andHenning Brauer
2004-04-28pfsync stats fixups:Ryan Thomas McBride
2004-04-28add /etc/isakmpd/pubkeys/{fqdn,ipv4,ipv6,ufqdn}, theo markus okHenning Brauer
2004-04-28prefix the auth related defines by AUTH_, we had a name clash, markus okHenning Brauer
2004-04-28Make carp(4) aware of its physical interface:Ryan Thomas McBride
2004-04-28IPv6 support; ok beck@Damien Miller
2004-04-28point out that pfsync_send_bus and pfsync_sendout must be called in splnet()Philipp Buehler
2004-04-27teach printconf about all this shiny new ipsec stuffHenning Brauer
2004-04-27set conf.auth.methodod for md5, tooMarkus Friedl
2004-04-27ike before inHenning Brauer
2004-04-27generate a isakmpd (host) key; ok henning, deraadt, cedricMarkus Friedl
2004-04-27rename the ipsec struct to auth, move all tcpmd5 related fields in there, andHenning Brauer
2004-04-27clean up ifdef hellPhilipp Buehler
2004-04-27parser parts for ipsec ike, markus okHenning Brauer
2004-04-27make "pfctl -vvsq" to print "No queue in use" and exit when there is noKenjiro Cho
2004-04-27getaddrinfo 4th arg has to be non-null. Gerard gerritsenJun-ichiro itojun Hagino
2004-04-27add an example w/ fstat(1)Philipp Buehler
2004-04-27reworking of man page and sync/update usage();Jason McIntyre
2004-04-27fd passing works over a socketpair too of course so document this.Todd C. Miller
2004-04-27two missing breaks, repairs tcpmd5, with markusHenning Brauer
2004-04-27initial documentationMarkus Friedl
2004-04-27validate the sequence numbers on TCP resets are an exact match. check is onlyMike Frantzen
2004-04-27don't loop forever on 0-size extensionsMarkus Friedl
2004-04-27regress check for macro presence/failure in bounded attrib declarationAnil Madhavapeddy
2004-04-27restrict the ipsec flows to BGP only; ok henningMarkus Friedl
2004-04-27Set oldp en oldlenp to NULL; provide feedback; set exit status.Otto Moerbeek