| Age | Commit message (Expand) | Author |
|---|
| 2006-05-29 | enable lists. | Hans-Joerg Hoexer |
| 2006-05-29 | Need protoype for ipsecctl_free_rule(). While around clean up | Hans-Joerg Hoexer |
| 2006-05-29 | Provide functions for copying members of rules. Implement copyrule() | Hans-Joerg Hoexer |
| 2006-05-29 | add ipsecctl_free_rule() for cleaning up rules. | Hans-Joerg Hoexer |
| 2006-05-29 | unify code a little bit (consistent variable names). | Hans-Joerg Hoexer |
| 2006-05-29 | Also return proper list of addresses for interface groups. | Hans-Joerg Hoexer |
| 2006-05-29 | As the rule expansion is now aware of host lists, host_if() has to | Hans-Joerg Hoexer |
| 2006-05-29 | teach expand_rule() to iterate over host lists, not used yet. | Hans-Joerg Hoexer |
| 2006-05-29 | fix rule numbering (for -vv) | Hans-Joerg Hoexer |
| 2006-05-29 | merge expand_sa() and expand_rule(). | Hans-Joerg Hoexer |
| 2006-05-29 | move generation of reverse flow rules to seperat function. | Hans-Joerg Hoexer |
| 2006-05-29 | unify expansion of SA rules. Needed for general rule expansion. | Hans-Joerg Hoexer |
| 2006-05-28 | when parsing host specifications, initialize host address queue pointers, not | Hans-Joerg Hoexer |
| 2006-05-28 | prepare for rule expansion. Get rid of addr_node, link struct | Hans-Joerg Hoexer |
| 2006-05-28 | kill trainling whitespace | Hans-Joerg Hoexer |
| 2006-05-28 | whoops, undo last commit. Of course, set_ipmask() is needed... | Hans-Joerg Hoexer |
| 2006-05-28 | this one not needed yet. | Hans-Joerg Hoexer |
| 2006-05-28 | fill in AF_INET6 cases | Todd T. Fries |
| 2006-05-28 | matching brackets are useful | Todd T. Fries |
| 2006-05-28 | missing `Ar'; | Jason McIntyre |
| 2006-05-28 | add ERANGE error detection, found when looking at bgpd's parse.y | Todd T. Fries |
| 2006-05-27 | Adresses can be specified in CIDR notation, as symbolic host names, interface | Hans-Joerg Hoexer |
| 2006-05-27 | allow to specify groups to be used IKE | Hans-Joerg Hoexer |
| 2006-05-26 | vpn.8 removal; | Jason McIntyre |
| 2006-05-26 | \<char> is <char> except for \<newline> -- no exceptions. much like how | Theo de Raadt |
| 2006-05-18 | paramter -> parameter | Miod Vallat |
| 2006-05-15 | permit proto 0; ok hshoexer | Theo de Raadt |
| 2006-05-15 | delete weird C | Theo de Raadt |
| 2006-05-11 | fix some spelling; noticed by david@ | Hans-Joerg Hoexer |
| 2006-04-20 | constify char *infile here, too. noticed by lint. | Hans-Joerg Hoexer |
| 2006-04-19 | add support for interface groups. | Hans-Joerg Hoexer |
| 2006-04-19 | small cleanup: no need to strdup here. | Hans-Joerg Hoexer |
| 2006-04-19 | "type" keyword to specify flow type (require, use, etc.) | Hans-Joerg Hoexer |
| 2006-04-19 | add hostname resolver. | Hans-Joerg Hoexer |
| 2006-04-13 | Add support for "local" to ike rules. Allows to specify the local IP to be | Hans-Joerg Hoexer |
| 2006-04-12 | document that tunnel and transport mode can be specified for SAs. | Hans-Joerg Hoexer |
| 2006-03-31 | tweaks; | Jason McIntyre |
| 2006-03-31 | wenn dumping rules always show type, srcid and dstid (if set). | Hans-Joerg Hoexer |
| 2006-03-31 | allow do delete dynamic rules | Hans-Joerg Hoexer |
| 2006-03-31 | allow specification of encapsulated protocol for ike; ok hshoexer | Markus Friedl |
| 2006-03-31 | allow specification of encapsulated protocol for flows; ok hshoexer | Markus Friedl |
| 2006-03-31 | uppercase `ip'; | Jason McIntyre |
| 2006-03-30 | when resolving interface names to ip adresses, set netmask to all bits 1 | Hans-Joerg Hoexer |
| 2006-03-30 | allow specification of outer local ips in flows (SADB_EXT_ADDRESS_SRC); ok hs... | Markus Friedl |
| 2006-03-22 | add support for macros in ipsec.conf(5). some bits have already been | Reyk Floeter |
| 2006-03-20 | When being verbose while deleting ike rules (-dv), print deletions instead of | Hans-Joerg Hoexer |
| 2006-03-20 | When adding a connection, do not explicitly start that connection | Hans-Joerg Hoexer |
| 2006-03-07 | add support for special "bypass" and "deny" flows. | Reyk Floeter |
| 2006-03-07 | add an ike option for road warrior setups (hosts with dynamic ip | Reyk Floeter |
| 2006-02-21 | The new default encryption algorithm for main mode is AES instead of 3DES. | Hans-Joerg Hoexer |
