Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-08-20 | <stdlib.h> is included, so do not need to cast result from | Theo de Raadt | |
malloc, calloc, realloc* ok krw millert | |||
2011-02-03 | When binding to addresses, ignore any IP address not in the current | Peter Hessler | |
routing domain. While here, update comment on what the ioctl is used for (from sthen@). OK mikeb@, sthen@ | |||
2009-01-28 | cleaning up my tree: trivial KNF and a comment fix. | Hans-Joerg Hoexer | |
2008-10-21 | do not listen on tentative (during DAD), duplicated (after DAD) or | Markus Friedl | |
detached addresses. bind(2) will not allow this. ok hshoexer, fries | |||
2007-04-16 | There's no point in checking ptr for NULL before doing free(ptr) | Moritz Jodeit | |
since free(NULL) is just fine. ok hshoexer@ | |||
2007-04-15 | Fix interop-issue with vpn peers that start reyking on port 4500 when | Hans-Joerg Hoexer | |
NAT-T is used. Solves problems with cisco and openswan. Tested by todd@ (cisco interop), ok ho@ Original fix with Stefan Roth (stefan dot roth at siemens dot com), thanks! | |||
2006-06-02 | Big spelling cleanup, no binary change. From david@ | Hans-Joerg Hoexer | |
2005-11-13 | zap unused variable and silence gcc. | Hans-Joerg Hoexer | |
From Mike Belopuhov <mkb at crypt dot org dot ru> Thanks! | |||
2005-10-27 | Do not touch LIST_* macro internals. | Hans-Joerg Hoexer | |
with otto@, ok ho@ | |||
2005-10-25 | some small knf, ok ho@ | Hans-Joerg Hoexer | |
2005-08-25 | read the information from the INADDR_ANY socket and do not loop if | Markus Friedl | |
a new IP appears (cf udp.c, rev 1.74), ok ho@ hshoexer@ cloder@ deraadt@ | |||
2005-04-08 | get rid of sysdep_sa_len | Hans-Joerg Hoexer | |
ok cloder@ | |||
2005-04-08 | USE_DEBUG is bye bye | Theo de Raadt | |
2005-04-08 | nat-traversal always | Theo de Raadt | |
2005-04-08 | Remove references to LINUX_IPSEC | Chad Loder | |
2005-04-07 | remove unnecessary typecasts. | Hans-Joerg Hoexer | |
ok ho@ | |||
2005-04-06 | knf, ok cloder | Theo de Raadt | |
2005-04-05 | Add -T flag to isakmpd to disable NAT-T support from the command line. | Chad Loder | |
This lets binat setups work again without having to recompile isakmpd. OK ho, hshoexer. | |||
2005-04-04 | spacing; ok cloder | Theo de Raadt | |
2005-03-05 | No need for err.h. hshoexer@ ok | Hakan Olsson | |
2005-03-04 | cleanup binding and cloning functions, use text2port(), correctly | Hans-Joerg Hoexer | |
determin the encap port. This makes udpencap fully useable on ports other than the default 4500. ok ho cloder | |||
2005-02-27 | where possible, use bzero instead of memset | Hans-Joerg Hoexer | |
ok cloder henning | |||
2004-12-14 | Allow the Address, Network, or Netmask values of the <IPsec-ID> to be | Ryan Thomas McBride | |
specified with an interface name (in which case the first address is used) or the keyword 'default' (in which case the address is selected based on the default route). eg: [roadwarrior-ip] ID-type= IPV4_ADDR Address= default ok ho@ hshoexer@ | |||
2004-09-20 | compile cleanly with -Wsign-compare | Hans-Joerg Hoexer | |
ok ho | |||
2004-08-10 | spacing | Theo de Raadt | |
2004-08-08 | spacing | Theo de Raadt | |
2004-08-03 | Rewrite the transport reference count code to avoid leaks. | Hakan Olsson | |
hshoexer@ ok. | |||
2004-07-08 | free() and close() in error path. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-06-22 | The NAT-T drafts suggest we should drop incoming messages arriving on | Hakan Olsson | |
the old port (500) after we've switched to the new one. | |||
2004-06-21 | When switching from main to encap transport, copy dst port if | Hakan Olsson | |
translated (NAT). | |||
2004-06-21 | Port floating (500->4500) for p1 and p2 exchanges. | Hakan Olsson | |
2004-06-20 | NAT-Traversal for isakmpd. Work in progress... | Hakan Olsson | |
hshoexer@ ok. |