summaryrefslogtreecommitdiff
path: root/sbin/ipsecctl
AgeCommit message (Expand)Author
2006-06-01rename list link for ipsec_rule structures from "entries" to "rule_entry".Hans-Joerg Hoexer
2006-06-01When no peer is specified, make this rule a "catch-all" rule for any remoteHans-Joerg Hoexer
2006-06-01Generate correct configuration for default peers.Hans-Joerg Hoexer
2006-05-31white spacesHans-Joerg Hoexer
2006-05-31add basicTodd T. Fries
2006-05-31add a little markup;Jason McIntyre
2006-05-31whitespace cleanupHans-Joerg Hoexer
2006-05-31shuffle some newlines to make all the formatting work againMathieu Sauve-Frankel
2006-05-31Small function header knf.Hans-Joerg Hoexer
2006-05-31Prepare for handling unnamed remote peers.Hans-Joerg Hoexer
2006-05-30implement monitor mode for ipsecctl. worked on with markus@Mathieu Sauve-Frankel
2006-05-29enable lists.Hans-Joerg Hoexer
2006-05-29Need protoype for ipsecctl_free_rule(). While around clean upHans-Joerg Hoexer
2006-05-29Provide functions for copying members of rules. Implement copyrule()Hans-Joerg Hoexer
2006-05-29add ipsecctl_free_rule() for cleaning up rules.Hans-Joerg Hoexer
2006-05-29unify code a little bit (consistent variable names).Hans-Joerg Hoexer
2006-05-29Also return proper list of addresses for interface groups.Hans-Joerg Hoexer
2006-05-29As the rule expansion is now aware of host lists, host_if() has toHans-Joerg Hoexer
2006-05-29teach expand_rule() to iterate over host lists, not used yet.Hans-Joerg Hoexer
2006-05-29fix rule numbering (for -vv)Hans-Joerg Hoexer
2006-05-29merge expand_sa() and expand_rule().Hans-Joerg Hoexer
2006-05-29move generation of reverse flow rules to seperat function.Hans-Joerg Hoexer
2006-05-29unify expansion of SA rules. Needed for general rule expansion.Hans-Joerg Hoexer
2006-05-28when parsing host specifications, initialize host address queue pointers, notHans-Joerg Hoexer
2006-05-28prepare for rule expansion. Get rid of addr_node, link structHans-Joerg Hoexer
2006-05-28kill trainling whitespaceHans-Joerg Hoexer
2006-05-28whoops, undo last commit. Of course, set_ipmask() is needed...Hans-Joerg Hoexer
2006-05-28this one not needed yet.Hans-Joerg Hoexer
2006-05-28fill in AF_INET6 casesTodd T. Fries
2006-05-28matching brackets are usefulTodd T. Fries
2006-05-28missing `Ar';Jason McIntyre
2006-05-28add ERANGE error detection, found when looking at bgpd's parse.yTodd T. Fries
2006-05-27Adresses can be specified in CIDR notation, as symbolic host names, interfaceHans-Joerg Hoexer
2006-05-27allow to specify groups to be used IKEHans-Joerg Hoexer
2006-05-26vpn.8 removal;Jason McIntyre
2006-05-26\<char> is <char> except for \<newline> -- no exceptions. much like howTheo de Raadt
2006-05-18paramter -> parameterMiod Vallat
2006-05-15permit proto 0; ok hshoexerTheo de Raadt
2006-05-15delete weird CTheo de Raadt
2006-05-11fix some spelling; noticed by david@Hans-Joerg Hoexer
2006-04-20constify char *infile here, too. noticed by lint.Hans-Joerg Hoexer
2006-04-19add support for interface groups.Hans-Joerg Hoexer
2006-04-19small cleanup: no need to strdup here.Hans-Joerg Hoexer
2006-04-19"type" keyword to specify flow type (require, use, etc.)Hans-Joerg Hoexer
2006-04-19add hostname resolver.Hans-Joerg Hoexer
2006-04-13Add support for "local" to ike rules. Allows to specify the local IP to beHans-Joerg Hoexer
2006-04-12document that tunnel and transport mode can be specified for SAs.Hans-Joerg Hoexer
2006-03-31tweaks;Jason McIntyre
2006-03-31wenn dumping rules always show type, srcid and dstid (if set).Hans-Joerg Hoexer
2006-03-31allow do delete dynamic rulesHans-Joerg Hoexer