Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-04-28 | FILE * leak; henning ja ja ja ja | Theo de Raadt | |
2004-04-28 | clean up EXAMPLES; | Jason McIntyre | |
ok pb@ | |||
2004-04-28 | typo from Jared Yanovich; | Jason McIntyre | |
ok deraadt@ | |||
2004-04-28 | Improve a bit. ok markus@ | Otto Moerbeek | |
2004-04-28 | sync | Theo de Raadt | |
2004-04-28 | manpage fixes in envpass stuff from Brian Poole (raj AT cerias.purdue.edu) | Damien Miller | |
2004-04-28 | Put authpf user's IP addresses in the <authpf_users> table. | Cedric Berger | |
ok deraadt@ dhartmei@ markus@ mcbride@ | |||
2004-04-28 | support for AH flows and SAs | Markus Friedl | |
2004-04-28 | Unbreak the stuff that I commited first that was totaly broken. OK henning@ | Claudio Jeker | |
2004-04-28 | allow ah/esp spec with IKE, markus ok | Henning Brauer | |
2004-04-28 | do not give up on ESRCH, someone might have mucked with ipsecadm behind | Henning Brauer | |
our back, markus ok | |||
2004-04-28 | make this at least compile | Henning Brauer | |
2004-04-28 | do not return here | Philipp Buehler | |
2004-04-28 | make sure send and reply are in sync; ok henning | Markus Friedl | |
2004-04-28 | Include db.h, not ndbm.h since this uses db routines and not ndbm. | Todd C. Miller | |
2004-04-28 | Enable route refresh in the RDE. Now peer can request route refreshes. | Claudio Jeker | |
OK henning@ | |||
2004-04-28 | keep track of which ipsec/md5 SAs we inserted - ESRCH on blind removal | Henning Brauer | |
otherwise, markus ok | |||
2004-04-28 | make return-rst work on pure bridges. ok dhartmei@ henning@ mcbride@ | Cedric Berger | |
2004-04-28 | Dont step into INET6 code, just because af != AF_INET | Philipp Buehler | |
Also comment #endif properly while being here ok mcbride@ | |||
2004-04-28 | remove mb_object*; ok tedu | Markus Friedl | |
2004-04-28 | Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp. | Ryan Thomas McBride | |
ok markus@ pb@ | |||
2004-04-28 | carp stats cleanup: | Ryan Thomas McBride | |
- convert counters to 64 bits - remove junk from netstat ok pb@ | |||
2004-04-28 | Removing some erroneous \n junk and a little KNF. ok & tested krw@ | Marco Peereboom | |
2004-04-28 | remove dup file kvm_amd64 should be used. | Marco S Hyman | |
OK deraadt@ | |||
2004-04-28 | prevent multiple auth methods to be specified | Henning Brauer | |
2004-04-28 | spacing | Theo de Raadt | |
2004-04-28 | spacing | Theo de Raadt | |
2004-04-28 | remove XXX that is wrong | Theo de Raadt | |
2004-04-28 | spacing | Henning Brauer | |
2004-04-28 | spacing | Theo de Raadt | |
2004-04-28 | correct yacc | Theo de Raadt | |
2004-04-28 | don't load SAs into the kernel if IKE is used. | Markus Friedl | |
2004-04-28 | keep route refresh counters into account when building sums, and | Henning Brauer | |
print route refresh counters in the neighbor view | |||
2004-04-28 | pfsync stats fixups: | Ryan Thomas McBride | |
- convert counters to 64 bits - add dedicated counters for sanity checks added right before release - clean up netstat output | |||
2004-04-28 | add /etc/isakmpd/pubkeys/{fqdn,ipv4,ipv6,ufqdn}, theo markus ok | Henning Brauer | |
2004-04-28 | prefix the auth related defines by AUTH_, we had a name clash, markus ok | Henning Brauer | |
2004-04-28 | Make carp(4) aware of its physical interface: | Ryan Thomas McBride | |
- If the physical interface goes down or the link goes down, the carp interface goes down as well. - We treat this like the preemption holdoff with pfsync. So if one of the carp interfaces is known to be bad (because the physical interface it's associated with is bad), all the other carp interfaces back off: they won't preempt, and their advskew goes to 240. ok cedric@ | |||
2004-04-28 | IPv6 support; ok beck@ | Damien Miller | |
2004-04-28 | point out that pfsync_send_bus and pfsync_sendout must be called in splnet() | Philipp Buehler | |
ok mcbride@ | |||
2004-04-27 | teach printconf about all this shiny new ipsec stuff | Henning Brauer | |
2004-04-27 | set conf.auth.methodod for md5, too | Markus Friedl | |
2004-04-27 | ike before in | Henning Brauer | |
2004-04-27 | generate a isakmpd (host) key; ok henning, deraadt, cedric | Markus Friedl | |
2004-04-27 | rename the ipsec struct to auth, move all tcpmd5 related fields in there, and | Henning Brauer | |
add a generic "method" field that expresses what method (none/md5sig/ipsec manual/ipsec ike) is in use markus ok | |||
2004-04-27 | clean up ifdef hell | Philipp Buehler | |
2004-04-27 | parser parts for ipsec ike, markus ok | Henning Brauer | |
2004-04-27 | make "pfctl -vvsq" to print "No queue in use" and exit when there is no | Kenjiro Cho | |
queue to show the state. requested by "Alexey E. Suslikov" <cruel@texnika.com.ua> ok henning@ | |||
2004-04-27 | getaddrinfo 4th arg has to be non-null. Gerard gerritsen | Jun-ichiro itojun Hagino | |
2004-04-27 | add an example w/ fstat(1) | Philipp Buehler | |
2004-04-27 | reworking of man page and sync/update usage(); | Jason McIntyre | |
this stuff is based mostly on diffs from jared yanovich, with some stuff from myself and otto; ok naddy@ otto@ markus@ deraadt@ |