summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2001-07-02Print out correct version stringNathan Binkert
2001-07-02Compile with WDCDEBUG.Hakan Olsson
2001-07-02- More vtophys death: packet buffer lists are is bus_dma(9) memory as isJason Wright
the mac buffer - also, reenable aggregation code (accidentally removed)
2001-07-02fix some incorrect cat page dependenciesTodd C. Miller
2001-07-02/dev/pf is major 39; openbsd@davidkrause.comAngelos D. Keromytis
2001-07-02Add pf.conf and nat.conf ;openbsd@davidkrause.comAngelos D. Keromytis
2001-07-02link with all required librariesTheo de Raadt
2001-07-02make the alpha happyTheo de Raadt
2001-07-02grr, indentTheo de Raadt
2001-07-02syncTheo de Raadt
2001-07-02these don't depend on pci register defsJason Wright
2001-07-02english is my first and only language... you'd never know it.Jason Wright
2001-07-01-WallDug Song
2001-07-01Variable declarations without extern are evil.Miod Vallat
2001-07-01Variable declarations without extern are evil.Miod Vallat
Also, use PSR_MODE instead of a hardcoded constant in CLKF_USERMODE.
2001-07-01Misc cleaning.Miod Vallat
2001-07-01List all authentication types; krb4-or-pwd is still the default...Todd C. Miller
2001-07-01tag packets generated by pf (return-rst, return-icmp) so they are not ↵Daniel Hartmeier
filtered, use existing icmp_error() and ip_output(). ok dugsong@, frantzen@
2001-07-01Enable the ``machine foo'' commands under ddb.Miod Vallat
Add a ``machine prom'' command, which returns to the BUG, like mvme68k has.
2001-07-01fix build by including two pieces of libroken directly into libkrb5.Dale Rahn
If this actually worked correctly before, the minor would have been incremented.
2001-07-01when you support kerberosV, you apparently need to also link in the 12Theo de Raadt
other libraries that it's tentacles lead to. This is just disgusting, and are going to pressure the KTH people to fix this. It's unmaintainable. kerberosV and kerberosIV even have cross dependencies. It's insane. patch developed at the same time by drahn and I
2001-07-01Add PF example and text; openbsd@davidkrause.comAngelos D. Keromytis
2001-07-01Appeared in 3.0, not 2.9; openbsd@davidkrause.comAngelos D. Keromytis
2001-07-01Add HISTORY and FILES section; openbsd@davidkrause.comAngelos D. Keromytis
2001-07-01Remember to end list.Angelos D. Keromytis
2001-07-01IPF cleanups; openbsd@davidkrause.comAngelos D. Keromytis
2001-07-01IPF->PF Xr reference; openbsd@davidkrause.comAngelos D. Keromytis
2001-07-01Remove IPF reference.Angelos D. Keromytis
2001-07-01full library lists, until this gets fixedTheo de Raadt
2001-07-01syncTheo de Raadt
2001-07-01add iopMichael Shalayeff
2001-07-01Remove warnings from non-DDEBUG case; angelos told me.Niklas Hallqvist
2001-07-01ISAKMP configuration, a.k.a IKECFG or "mode-config", protocol implementation.Niklas Hallqvist
Disabled, has no configuration mechanism yet. This will be used for roaming users, who are going to get parameters like IP-address and nameserver from its peer, very much like DHCP, but securily inside an ISAKMP connection and still in time before negotiation of IPsec connections. You may see stylistic fixes in this commit too. Add some not yet used Makefile magic to deal with DNSSEC- enabled OpenSSL too. The IKECFG code work was sponsered by Gatespace Inc. Thank you! Configuration will come very soon, btw.
2001-07-01strtol strictness. Style. Do not use dst end on an unconnected socket.Niklas Hallqvist
This should fix the IPv6 work for this round, There has been code by ho@ too in most my recent commits, we did this on Boston Logan airport, on our way home from !c2k1, the OpenBSD hackathon.
2001-07-01build iop and iopspMichael Shalayeff
2001-07-01add iop(4) and iopsp(4) from netbsdMichael Shalayeff
2001-07-01s/cdev_gen_ipf/cdev_pf_init/ ;openbsd@davidkrause.comAngelos D. Keromytis
2001-07-01More Style police, but also sane checking of addressNiklas Hallqvist
family vs stated ID-type.
2001-07-01strict strtol checking. text2sockaddr/sockaddr2text implementationsNiklas Hallqvist
for systems without get{addr,name}info calls. Some style police.
2001-07-01StyleNiklas Hallqvist
2001-07-01Style policeNiklas Hallqvist
2001-07-01Regression test for isakmpd utility functions, initially just text2sockaddr.Niklas Hallqvist
2001-07-01Start support for IPv6 addresses in policy.Angelos D. Keromytis
2001-07-01Set size correctly for IPv6 Phase 1 IDs.Angelos D. Keromytis
2001-07-01Debug information for IDs.Angelos D. Keromytis
2001-07-01Return the right length for address IDs.Angelos D. Keromytis
2001-07-01Add port ranges to the rdr directive. Connections can be redirectedKjell Wooding
to either a range of the same size, or a single port. Redirects between ranges of different sizes are not supported. Eg: rdr dc0 10.0.0.0/24 port 60000:61000 -> 127.0.0.1 port 65530:* proto udp rdr xl0 0.0.0.0/0 port 6660:6669 -> 127.0.0.1 port 6667 proto tcp This replaces the wildcard port patch (when port = 0), as it should no longer be necessary. ok dhartmei@
2001-07-01Always print filter statistics, even when the filter is disabled.Kjell Wooding
2001-07-01Finish with posixifying command options. Now both "pfctl -Fs" andKjell Wooding
"pfctl -F states" work. Changed -[Fs]S to -[Fs] info (or -[Fs]i) based on an earlier conversation with theo. Added -[Fs] "all" to show or flush everything Fixup some man page pastos in the process
2001-07-01Get the 'default:' case right too.Hakan Olsson