| Age | Commit message (Expand) | Author |
|---|
| 2006-11-24 | add support to tag ipsec traffic belonging to specific IKE-initiated | Reyk Floeter |
| 2006-11-24 | fix typo for remote port; from Brian Candler | Markus Friedl |
| 2006-11-21 | do not delete sections that might be shared with other connections | Markus Friedl |
| 2006-11-13 | briefly describe phases 1 and 2, and use these terms more | Jason McIntyre |
| 2006-11-13 | previous was not quite right; | Jason McIntyre |
| 2006-11-13 | fix a macro mistake; | Jason McIntyre |
| 2006-11-13 | Handle rules with addresses from mismatched address families correctly. | Ryan Thomas McBride |
| 2006-11-10 | check both rule sourace and destination when grouping sa's | Mathieu Sauve-Frankel |
| 2006-11-10 | When using -vv, also show grouped SAs. | Hans-Joerg Hoexer |
| 2006-11-10 | Fix grouping for SAs. Now all combinations of SAs are possible, | Hans-Joerg Hoexer |
| 2006-11-10 | Do not count sa, ike and tcpmd5 rules twice. Fixes PR 5263. | Hans-Joerg Hoexer |
| 2006-11-01 | KNF unrelated to previous commit. | Ryan Thomas McBride |
| 2006-11-01 | Add support for aggressive mode (from the k2k6 IPsec hackathon). | Ryan Thomas McBride |
| 2006-10-19 | note that all rules using enc0 should specify: keep state (if-bound) | Jason McIntyre |
| 2006-09-29 | add a new section header, since DESCRIPTION is getting so large... | Jason McIntyre |
| 2006-09-29 | make it clearer what needs to be run, and how; push manual keying down | Jason McIntyre |
| 2006-09-26 | a better description of what our automatic keying example is up to; | Jason McIntyre |
| 2006-09-22 | - document which parts need to be packet filtered, and why | Jason McIntyre |
| 2006-09-22 | typo in err(); from bret.lambert@gmail.com, thanks! | Hans-Joerg Hoexer |
| 2006-09-19 | sort SAs by spi; ok hshoexer | Markus Friedl |
| 2006-09-18 | KNF and clean some trailing white spaces, no binary change. | Hans-Joerg Hoexer |
| 2006-09-15 | reorganise the sections to make more sense; | Jason McIntyre |
| 2006-09-15 | clarification; | Jason McIntyre |
| 2006-09-15 | add in filtering rules to allow keying daemons to talk; | Jason McIntyre |
| 2006-09-14 | simplify an example. ok jmc@ | Hans-Joerg Hoexer |
| 2006-09-13 | use "proto ipencap" for the gateway filter rules; | Jason McIntyre |
| 2006-09-12 | note that enc traffic is unecrypted; from mpf | Jason McIntyre |
| 2006-09-12 | no need to Xr isakmpd.conf.5; | Jason McIntyre |
| 2006-09-12 | add a section on packet filtering ipsec traffic; | Jason McIntyre |
| 2006-09-11 | improvememnts for `local', `peer', and `psk'; ok hshoexer | Jason McIntyre |
| 2006-09-11 | - document how to set ipsec stuff running at boot | Jason McIntyre |
| 2006-09-07 | note that we can filter ipsec traffic on the enc interface; | Jason McIntyre |
| 2006-09-07 | improve the tcpmd5 section; ok claudio hshoexer | Jason McIntyre |
| 2006-09-07 | move all the auth/enc/group stuff into one definitive section; | Jason McIntyre |
| 2006-09-06 | start to group the parameters for AUTOMATIC KEYING in a more logical way; | Jason McIntyre |
| 2006-09-05 | knock out a ton of Aq/Xo/Xc that was either unneeded, or just plain wrong; | Jason McIntyre |
| 2006-09-05 | document line splitting using `\'; | Jason McIntyre |
| 2006-09-05 | slight text shuffle, and make the isakmpd bits clearer; | Jason McIntyre |
| 2006-09-04 | some wording fixes for the section headers and minor tweaks; | Jason McIntyre |
| 2006-09-04 | document comments, address syntax, and list expansion; | Jason McIntyre |
| 2006-09-01 | a little better text for the sections; ok hshoexer | Jason McIntyre |
| 2006-08-31 | Security Association Database is abbreviated 'SAD' (RFC 2401 et al), not 'SAD... | Hakan Olsson |
| 2006-08-31 | knock out the cpp/m4 stuff from MACROS; after discussion with many... | Jason McIntyre |
| 2006-08-31 | some improvements to srcid and destid, as noted by mpf; | Jason McIntyre |
| 2006-08-31 | expand DESCRIPTION; input from ho hshoexer naddy | Jason McIntyre |
| 2006-08-31 | clarify an .Sh; agreed with hshoexer | Jason McIntyre |
| 2006-08-30 | can get EAGAIN when writing to the pfkey socket; same change as bgpd, | Henning Brauer |
| 2006-08-30 | cut down the examples; ok hshoexer | Jason McIntyre |
| 2006-08-30 | partial backout of last commit | Markus Friedl |
| 2006-08-30 | some tcp md5 bits; | Jason McIntyre |
