summaryrefslogtreecommitdiff
path: root/sbin/ipsecctl/ipsec.conf.5
AgeCommit message (Collapse)Author
2006-09-06start to group the parameters for AUTOMATIC KEYING in a more logical way;Jason McIntyre
ok hshoexer
2006-09-05knock out a ton of Aq/Xo/Xc that was either unneeded, or just plain wrong;Jason McIntyre
2006-09-05document line splitting using `\';Jason McIntyre
2006-09-05slight text shuffle, and make the isakmpd bits clearer;Jason McIntyre
ok hshoexer
2006-09-04some wording fixes for the section headers and minor tweaks;Jason McIntyre
2006-09-04document comments, address syntax, and list expansion;Jason McIntyre
remove some duplicate text; ok hshoexer
2006-09-01a little better text for the sections; ok hshoexerJason McIntyre
2006-08-31knock out the cpp/m4 stuff from MACROS; after discussion with many...Jason McIntyre
2006-08-31some improvements to srcid and destid, as noted by mpf;Jason McIntyre
ok hshoexer mpf
2006-08-31expand DESCRIPTION; input from ho hshoexer naddyJason McIntyre
2006-08-31clarify an .Sh; agreed with hshoexerJason McIntyre
2006-08-30cut down the examples; ok hshoexerJason McIntyre
2006-08-30some tcp md5 bits;Jason McIntyre
2006-08-30comment out some comp stuff i missed earlier;Jason McIntyre
2006-08-30better wording for the key generation section;Jason McIntyre
2006-08-30kill more redundant text, and an oops;Jason McIntyre
2006-08-30remove some repeated text, and shuffle a little;Jason McIntyre
2006-08-30one more from ho;Jason McIntyre
2006-08-30correction; from hoJason McIntyre
2006-08-30knock out some redundant text; from hoJason McIntyre
2006-08-30put the PFS stuff in the right place;Jason McIntyre
from uwe werler; tweaks/ok hshoexer ho
2006-08-30knock out ipcomp for now;Jason McIntyre
2006-08-30put this page into a better structure orderJason McIntyre
(very little text change); from hshoexer and myself; ok everyone
2006-08-29add support for ufqdn ids in ike rulesMathieu Sauve-Frankel
ok hshoexer@
2006-08-29Add support for IKE AH rules to ipsecctl. Man page input by jmc@.Christian Weisgerber
ok hshoexer@
2006-07-22corrections from alexey e. suslikov;Jason McIntyre
ok hshoexer
2006-06-28document lists, prodded by david@Hans-Joerg Hoexer
2006-06-18add group "none"; when choosen, pfs will be disabled.Hans-Joerg Hoexer
ok david msf
2006-06-14recover list of key sizes from vpn(8); suggested by markus@, ok hshoexer@Christian Weisgerber
2006-06-13For IKE, allow main mode SHA2 and quick mode AESCTR transforms,Christian Weisgerber
which were recently added to isakmpd. ok hshoexer@, markus@
2006-06-11the default encryption algorithm with static keying is AES-CBC now; ok hshoexer@Christian Weisgerber
2006-06-11Adopt to recent changes (mopd3072 is not the default anymore).Hans-Joerg Hoexer
Prodded by david@, thanks!
2006-06-08Add a transport mode specifier to ike rules. Tunnel mode remains the default.Christian Weisgerber
"looks right" hshoexer@
2006-06-02correct spelling of specifiedDavid Krause
2006-06-02document port modifiers in ike rulesChristian Weisgerber
2006-06-02mark up keywords using .Ic; ok hshoexerJason McIntyre
2006-06-01address has two `d', and i had to use a dictionary to check ;)Jason McIntyre
2006-06-01document port matching in flows; ok hshoexer@Christian Weisgerber
2006-05-28missing `Ar';Jason McIntyre
2006-05-27Adresses can be specified in CIDR notation, as symbolic host names, interfaceHans-Joerg Hoexer
names or interface group names. So it's time to document this...
2006-05-27allow to specify groups to be used IKEHans-Joerg Hoexer
2006-05-26vpn.8 removal;Jason McIntyre
2006-05-18paramter -> parameterMiod Vallat
2006-04-19"type" keyword to specify flow type (require, use, etc.)Hans-Joerg Hoexer
2006-04-19add hostname resolver.Hans-Joerg Hoexer
at least some eyeballing by cloder@ tested by jean raby, requested/suggested by rod withworth
2006-04-13Add support for "local" to ike rules. Allows to specify the local IP to beHans-Joerg Hoexer
used on a multi-homed machine. Also, relax order of peer/local keywords. ok markus@
2006-04-12document that tunnel and transport mode can be specified for SAs.Hans-Joerg Hoexer
2006-03-31tweaks;Jason McIntyre
2006-03-31allow specification of encapsulated protocol for ike; ok hshoexerMarkus Friedl
2006-03-31allow specification of encapsulated protocol for flows; ok hshoexerMarkus Friedl