Age | Commit message (Collapse) | Author | |
---|---|---|---|
2001-07-01 | IPF cleanups; openbsd@davidkrause.com | Angelos D. Keromytis | |
2001-07-01 | IPF->PF Xr reference; openbsd@davidkrause.com | Angelos D. Keromytis | |
2001-07-01 | Remove IPF reference. | Angelos D. Keromytis | |
2001-07-01 | full library lists, until this gets fixed | Theo de Raadt | |
2001-07-01 | sync | Theo de Raadt | |
2001-07-01 | add iop | Michael Shalayeff | |
2001-07-01 | Remove warnings from non-DDEBUG case; angelos told me. | Niklas Hallqvist | |
2001-07-01 | ISAKMP configuration, a.k.a IKECFG or "mode-config", protocol implementation. | Niklas Hallqvist | |
Disabled, has no configuration mechanism yet. This will be used for roaming users, who are going to get parameters like IP-address and nameserver from its peer, very much like DHCP, but securily inside an ISAKMP connection and still in time before negotiation of IPsec connections. You may see stylistic fixes in this commit too. Add some not yet used Makefile magic to deal with DNSSEC- enabled OpenSSL too. The IKECFG code work was sponsered by Gatespace Inc. Thank you! Configuration will come very soon, btw. | |||
2001-07-01 | strtol strictness. Style. Do not use dst end on an unconnected socket. | Niklas Hallqvist | |
This should fix the IPv6 work for this round, There has been code by ho@ too in most my recent commits, we did this on Boston Logan airport, on our way home from !c2k1, the OpenBSD hackathon. | |||
2001-07-01 | build iop and iopsp | Michael Shalayeff | |
2001-07-01 | add iop(4) and iopsp(4) from netbsd | Michael Shalayeff | |
2001-07-01 | s/cdev_gen_ipf/cdev_pf_init/ ;openbsd@davidkrause.com | Angelos D. Keromytis | |
2001-07-01 | More Style police, but also sane checking of address | Niklas Hallqvist | |
family vs stated ID-type. | |||
2001-07-01 | strict strtol checking. text2sockaddr/sockaddr2text implementations | Niklas Hallqvist | |
for systems without get{addr,name}info calls. Some style police. | |||
2001-07-01 | Style | Niklas Hallqvist | |
2001-07-01 | Style police | Niklas Hallqvist | |
2001-07-01 | Regression test for isakmpd utility functions, initially just text2sockaddr. | Niklas Hallqvist | |
2001-07-01 | Start support for IPv6 addresses in policy. | Angelos D. Keromytis | |
2001-07-01 | Set size correctly for IPv6 Phase 1 IDs. | Angelos D. Keromytis | |
2001-07-01 | Debug information for IDs. | Angelos D. Keromytis | |
2001-07-01 | Return the right length for address IDs. | Angelos D. Keromytis | |
2001-07-01 | Add port ranges to the rdr directive. Connections can be redirected | Kjell Wooding | |
to either a range of the same size, or a single port. Redirects between ranges of different sizes are not supported. Eg: rdr dc0 10.0.0.0/24 port 60000:61000 -> 127.0.0.1 port 65530:* proto udp rdr xl0 0.0.0.0/0 port 6660:6669 -> 127.0.0.1 port 6667 proto tcp This replaces the wildcard port patch (when port = 0), as it should no longer be necessary. ok dhartmei@ | |||
2001-07-01 | Always print filter statistics, even when the filter is disabled. | Kjell Wooding | |
2001-07-01 | Finish with posixifying command options. Now both "pfctl -Fs" and | Kjell Wooding | |
"pfctl -F states" work. Changed -[Fs]S to -[Fs] info (or -[Fs]i) based on an earlier conversation with theo. Added -[Fs] "all" to show or flush everything Fixup some man page pastos in the process | |||
2001-07-01 | Get the 'default:' case right too. | Hakan Olsson | |
2001-07-01 | Teach ipsec_decode_ids about IPv6. More error checking, some better log msgs. | Hakan Olsson | |
2001-07-01 | for ICMP error messages refering to TCP packets, only use the first 8 bytes ↵ | Daniel Hartmeier | |
of the TCP header. drop ackskew test and th_sum update. | |||
2001-07-01 | pf is major 39 on powerpc | Daniel Hartmeier | |
2001-07-01 | Initialization infrastruture for pf. Based on initial patches | Kjell Wooding | |
by ian@, and much input and mangling from theo. | |||
2001-07-01 | Add missing space in debug message. | Angelos D. Keromytis | |
2001-07-01 | Fix length check, add some more sanity checks on INET6. | Angelos D. Keromytis | |
2001-07-01 | KNF, and add DPRINTFs all over the place. | Angelos D. Keromytis | |
2001-07-01 | Eliminate IPv4 dependency. | Angelos D. Keromytis | |
2001-07-01 | Remove inaccurate "Assumes IPv4" comments. | Angelos D. Keromytis | |
2001-07-01 | Pass the right arguments to getnameinfo() | Angelos D. Keromytis | |
2001-07-01 | Fix remote_negotiation_address attribute; fix sockaddr2text() return | Angelos D. Keromytis | |
value when zero-filling; log_error()->log_print() consistently. | |||
2001-07-01 | Don't try to delete unestablished SPIs. | Angelos D. Keromytis | |
2001-07-01 | More prototype/header file cleanup. | Dale Rahn | |
2001-07-01 | Properly identify the PBG4 keyboard, US keyboard at least. | Dale Rahn | |
2001-06-30 | adress -> address; ok markus@ | Kevin Steves | |
2001-06-30 | Default login style is now krb4-or-pwd, not krb-or-pwd. | Todd C. Miller | |
2001-06-30 | Repair 197 support (oops) | Miod Vallat | |
2001-06-30 | Get root filehandle via nfs_root. | Constantine Sapuntzakis | |
Fix problem with diskless clients | |||
2001-06-30 | make it more sysctl-like, ommit -kmd switches. | Michael Shalayeff | |
no backwards compatibility keeped. add ability to change screens from cmd line. | |||
2001-06-30 | fix the love quote, slacker bob | Michael Shalayeff | |
2001-06-30 | More log searching; mickey@ ok'ed. | Federico G. Schwindt | |
2001-06-30 | more from icb.log; mickey@ ok. | Federico G. Schwindt | |
2001-06-30 | ok mickey@ | Bob Beck | |
2001-06-30 | faith(4) is now documented in RFC3142. | Jun-ichiro itojun Hagino | |
2001-06-30 | missing freeaddrinfo(). PR 1907 | Jun-ichiro itojun Hagino | |