Age | Commit message (Expand) | Author |
2006-08-30 | cut down the examples; ok hshoexer | Jason McIntyre |
2006-08-30 | some tcp md5 bits; | Jason McIntyre |
2006-08-30 | comment out some comp stuff i missed earlier; | Jason McIntyre |
2006-08-30 | better wording for the key generation section; | Jason McIntyre |
2006-08-30 | kill more redundant text, and an oops; | Jason McIntyre |
2006-08-30 | remove some repeated text, and shuffle a little; | Jason McIntyre |
2006-08-30 | one more from ho; | Jason McIntyre |
2006-08-30 | correction; from ho | Jason McIntyre |
2006-08-30 | knock out some redundant text; from ho | Jason McIntyre |
2006-08-30 | put the PFS stuff in the right place; | Jason McIntyre |
2006-08-30 | knock out ipcomp for now; | Jason McIntyre |
2006-08-30 | put this page into a better structure order | Jason McIntyre |
2006-08-29 | add support for ufqdn ids in ike rules | Mathieu Sauve-Frankel |
2006-08-29 | Add support for IKE AH rules to ipsecctl. Man page input by jmc@. | Christian Weisgerber |
2006-07-22 | corrections from alexey e. suslikov; | Jason McIntyre |
2006-06-28 | document lists, prodded by david@ | Hans-Joerg Hoexer |
2006-06-18 | add group "none"; when choosen, pfs will be disabled. | Hans-Joerg Hoexer |
2006-06-14 | recover list of key sizes from vpn(8); suggested by markus@, ok hshoexer@ | Christian Weisgerber |
2006-06-13 | For IKE, allow main mode SHA2 and quick mode AESCTR transforms, | Christian Weisgerber |
2006-06-11 | the default encryption algorithm with static keying is AES-CBC now; ok hshoexer@ | Christian Weisgerber |
2006-06-11 | Adopt to recent changes (mopd3072 is not the default anymore). | Hans-Joerg Hoexer |
2006-06-08 | Add a transport mode specifier to ike rules. Tunnel mode remains the default. | Christian Weisgerber |
2006-06-02 | correct spelling of specified | David Krause |
2006-06-02 | document port modifiers in ike rules | Christian Weisgerber |
2006-06-02 | mark up keywords using .Ic; ok hshoexer | Jason McIntyre |
2006-06-01 | address has two `d', and i had to use a dictionary to check ;) | Jason McIntyre |
2006-06-01 | document port matching in flows; ok hshoexer@ | Christian Weisgerber |
2006-05-28 | missing `Ar'; | Jason McIntyre |
2006-05-27 | Adresses can be specified in CIDR notation, as symbolic host names, interface | Hans-Joerg Hoexer |
2006-05-27 | allow to specify groups to be used IKE | Hans-Joerg Hoexer |
2006-05-26 | vpn.8 removal; | Jason McIntyre |
2006-05-18 | paramter -> parameter | Miod Vallat |
2006-04-19 | "type" keyword to specify flow type (require, use, etc.) | Hans-Joerg Hoexer |
2006-04-19 | add hostname resolver. | Hans-Joerg Hoexer |
2006-04-13 | Add support for "local" to ike rules. Allows to specify the local IP to be | Hans-Joerg Hoexer |
2006-04-12 | document that tunnel and transport mode can be specified for SAs. | Hans-Joerg Hoexer |
2006-03-31 | tweaks; | Jason McIntyre |
2006-03-31 | allow specification of encapsulated protocol for ike; ok hshoexer | Markus Friedl |
2006-03-31 | allow specification of encapsulated protocol for flows; ok hshoexer | Markus Friedl |
2006-03-31 | uppercase `ip'; | Jason McIntyre |
2006-03-30 | allow specification of outer local ips in flows (SADB_EXT_ADDRESS_SRC); ok hs... | Markus Friedl |
2006-03-22 | add support for macros in ipsec.conf(5). some bits have already been | Reyk Floeter |
2006-03-07 | add support for special "bypass" and "deny" flows. | Reyk Floeter |
2006-03-07 | add an ike option for road warrior setups (hosts with dynamic ip | Reyk Floeter |
2006-02-21 | The new default encryption algorithm for main mode is AES instead of 3DES. | Hans-Joerg Hoexer |
2006-01-16 | add support for pre-shared keys with "ike esp" using the new keyword | Reyk Floeter |
2005-12-06 | ipip support: ip-in-ip w/o gif(4); ok hshoexer | Markus Friedl |
2005-11-24 | "hmac" not "hmc", notice by <gwyllion at ulyssis dot org> | Hans-Joerg Hoexer |
2005-11-24 | Make clear we only have "hmac-sha1" and "hmac-md5". | Hans-Joerg Hoexer |
2005-10-30 | - SEE ALSO is sorted by section first | Jason McIntyre |