summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2004-04-28FILE * leak; henning ja ja ja jaTheo de Raadt
2004-04-28clean up EXAMPLES;Jason McIntyre
ok pb@
2004-04-28typo from Jared Yanovich;Jason McIntyre
ok deraadt@
2004-04-28Improve a bit. ok markus@Otto Moerbeek
2004-04-28syncTheo de Raadt
2004-04-28manpage fixes in envpass stuff from Brian Poole (raj AT cerias.purdue.edu)Damien Miller
2004-04-28Put authpf user's IP addresses in the <authpf_users> table.Cedric Berger
ok deraadt@ dhartmei@ markus@ mcbride@
2004-04-28support for AH flows and SAsMarkus Friedl
2004-04-28Unbreak the stuff that I commited first that was totaly broken. OK henning@Claudio Jeker
2004-04-28allow ah/esp spec with IKE, markus okHenning Brauer
2004-04-28do not give up on ESRCH, someone might have mucked with ipsecadm behindHenning Brauer
our back, markus ok
2004-04-28make this at least compileHenning Brauer
2004-04-28do not return herePhilipp Buehler
2004-04-28make sure send and reply are in sync; ok henningMarkus Friedl
2004-04-28Include db.h, not ndbm.h since this uses db routines and not ndbm.Todd C. Miller
2004-04-28Enable route refresh in the RDE. Now peer can request route refreshes.Claudio Jeker
OK henning@
2004-04-28keep track of which ipsec/md5 SAs we inserted - ESRCH on blind removalHenning Brauer
otherwise, markus ok
2004-04-28make return-rst work on pure bridges. ok dhartmei@ henning@ mcbride@Cedric Berger
2004-04-28Dont step into INET6 code, just because af != AF_INETPhilipp Buehler
Also comment #endif properly while being here ok mcbride@
2004-04-28remove mb_object*; ok teduMarkus Friedl
2004-04-28Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp.Ryan Thomas McBride
ok markus@ pb@
2004-04-28carp stats cleanup:Ryan Thomas McBride
- convert counters to 64 bits - remove junk from netstat ok pb@
2004-04-28Removing some erroneous \n junk and a little KNF. ok & tested krw@Marco Peereboom
2004-04-28remove dup file kvm_amd64 should be used.Marco S Hyman
OK deraadt@
2004-04-28prevent multiple auth methods to be specifiedHenning Brauer
2004-04-28spacingTheo de Raadt
2004-04-28spacingTheo de Raadt
2004-04-28remove XXX that is wrongTheo de Raadt
2004-04-28spacingHenning Brauer
2004-04-28spacingTheo de Raadt
2004-04-28correct yaccTheo de Raadt
2004-04-28don't load SAs into the kernel if IKE is used.Markus Friedl
2004-04-28keep route refresh counters into account when building sums, andHenning Brauer
print route refresh counters in the neighbor view
2004-04-28pfsync stats fixups:Ryan Thomas McBride
- convert counters to 64 bits - add dedicated counters for sanity checks added right before release - clean up netstat output
2004-04-28add /etc/isakmpd/pubkeys/{fqdn,ipv4,ipv6,ufqdn}, theo markus okHenning Brauer
2004-04-28prefix the auth related defines by AUTH_, we had a name clash, markus okHenning Brauer
2004-04-28Make carp(4) aware of its physical interface:Ryan Thomas McBride
- If the physical interface goes down or the link goes down, the carp interface goes down as well. - We treat this like the preemption holdoff with pfsync. So if one of the carp interfaces is known to be bad (because the physical interface it's associated with is bad), all the other carp interfaces back off: they won't preempt, and their advskew goes to 240. ok cedric@
2004-04-28IPv6 support; ok beck@Damien Miller
2004-04-28point out that pfsync_send_bus and pfsync_sendout must be called in splnet()Philipp Buehler
ok mcbride@
2004-04-27teach printconf about all this shiny new ipsec stuffHenning Brauer
2004-04-27set conf.auth.methodod for md5, tooMarkus Friedl
2004-04-27ike before inHenning Brauer
2004-04-27generate a isakmpd (host) key; ok henning, deraadt, cedricMarkus Friedl
2004-04-27rename the ipsec struct to auth, move all tcpmd5 related fields in there, andHenning Brauer
add a generic "method" field that expresses what method (none/md5sig/ipsec manual/ipsec ike) is in use markus ok
2004-04-27clean up ifdef hellPhilipp Buehler
2004-04-27parser parts for ipsec ike, markus okHenning Brauer
2004-04-27make "pfctl -vvsq" to print "No queue in use" and exit when there is noKenjiro Cho
queue to show the state. requested by "Alexey E. Suslikov" <cruel@texnika.com.ua> ok henning@
2004-04-27getaddrinfo 4th arg has to be non-null. Gerard gerritsenJun-ichiro itojun Hagino
2004-04-27add an example w/ fstat(1)Philipp Buehler
2004-04-27reworking of man page and sync/update usage();Jason McIntyre
this stuff is based mostly on diffs from jared yanovich, with some stuff from myself and otto; ok naddy@ otto@ markus@ deraadt@