summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2003-05-15kill unusedJun-ichiro itojun Hagino
2003-05-15simplify by strdup. expilcitly specify IPPROTO_TCP (to cope with sctp-readyJun-ichiro itojun Hagino
getaddrinfo).
2003-05-15(c)Hakan Olsson
2003-05-15tests for "scrub tcp reassemble"Mike Frantzen
2003-05-15Get rid of read_from_pid() and write_to_pid(), they wereJean-Francois Brousseau
replaced by the more generic process_read() and process_write() ok art@
2003-05-15document scrub opt "reassemble tcp"Mike Frantzen
2003-05-14add scrub modifier "reassemble tcp" to turn on stateful TCP normalizationsMike Frantzen
ok henning@ dhartmei@
2003-05-14Preparing to move kerberos libraries to src/libHans Insulander
2003-05-14- modulate TCP Timestamps so they can't be used to detect NAT and to precludeMike Frantzen
remote uptime determination - scrub modifier "reassemble tcp" turns on stateful TCP normalizations ok henning@ dhartmei@
2003-05-14properly terminate debug string (levels >=40)Kjell Wooding
Use "%.*s" as suggested by Niklas. ok ho@. Lost by kjell. oked ho@. lost by kjell again. oked ho@
2003-05-14use __KAME__ to determine kame-based kernel.Jun-ichiro itojun Hagino
2003-05-14Silence the "lost carrier on FOO port" messages when the port has been setMiod Vallat
in stone with "ifconfig le0 media foo". Inspired by previous am7990.c change. ok todd@ jason@
2003-05-14Make the "slot" and "offset" locators for sbus drivers optional inMiod Vallat
configuration lines.
2003-05-14sshfp contains fingerprints, not keysJakob Schlyter
2003-05-14Remove the .if/.endif stuff that gmake does not understand.Hakan Olsson
Replace with a comment about needing keynote for policy.
2003-05-14Fix uninitialized variable.Miod Vallat
2003-05-14rename enumJakob Schlyter
2003-05-14test binat and taggingHenning Brauer
2003-05-14LONGRUN in !SMALL_KERNEL nowTed Unangst
2003-05-14tagging on binatHenning Brauer
2003-05-14remove option LONGRUN; it's in everything but SMALL_KERNEL nowTed Unangst
2003-05-14update license, remove 3rd clause. ok author (me)Jakob Schlyter
2003-05-14test tagging on rdrHenning Brauer
2003-05-14enabled tagging on rdr rulesHenning Brauer
2003-05-14add _isakmpd user/group for privsep. ok millert@Jakob Schlyter
2003-05-14allow to send a BREAK to the remote system; ok variousMarkus Friedl
2003-05-14_kdc and _kadmin users and groups added. Will be used by the kerberos kdcHans Insulander
and admin servers ok deraadt@
2003-05-14new option LONGRUNTed Unangst
2003-05-14test against some new commerical versionsMarkus Friedl
2003-05-14Support for Transmeta CPU power management, called LongRun.Ted Unangst
option LONGRUN enables a new sysctl, allowing a userland program to read the current CPU frequency and voltage and also set the mininum and maximum frequencies to operate between, and switch between performance mode and battery mode. ok mickey@
2003-05-14tag on each matching rule, not just the last one.Henning Brauer
idea from theo. to speed that up the real mbuf tag is not written until we hit the last match but an internal variable is used to track the tag. this can be used to split classification and policy enforcement, for example. and much much much more... ok dhartmei@ frantzen@
2003-05-14Wrong check..Thierry Deval
2003-05-14strcpy + size checkThierry Deval
ok tedu@
2003-05-14Call the FreeS/WAN sysdep 'freeswan'. The 'linux' sysdep will be native ↵Hakan Olsson
Linux IPSec.
2003-05-14add missing prototype; ok deraadt@Jason Peel
2003-05-14unifdef __FreeBSD__ and stuff. markus okJun-ichiro itojun Hagino
2003-05-14KNF. markus okJun-ichiro itojun Hagino
2003-05-14No more gated. ok krw@, deraadt@, commments from David Krause, jakob@.Ian Darwin
2003-05-14add experimental support for verifying hos keys using DNS as describedJakob Schlyter
in draft-ietf-secsh-dns-xx.txt. more information in README.dns. ok markus@ and henning@
2003-05-14Default public key directory definition sanity.Hakan Olsson
2003-05-14Policy file default defined twice, kill the local copy.Hakan Olsson
2003-05-14Fix a typo (in unused code).Hakan Olsson
2003-05-14"error" was typed double, which is not suitable for getaddrinfo(3).Jun-ichiro itojun Hagino
from tobias
2003-05-14Unbreak 64-bit archs...Thierry Deval
2003-05-14nuke !PULLDOWN_TEST case. (leftover from yesterday)Jun-ichiro itojun Hagino
2003-05-14Fix stupid typo in example.Miod Vallat
2003-05-14I did not test this enough. Unbreak.Hakan Olsson
2003-05-14Might mention mgx here as well.Miod Vallat
2003-05-14KNF; sync w/kameJun-ichiro itojun Hagino
2003-05-14Pointer cleaning. ok ian@, tedu@, krw@Thierry Deval