summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2001-08-25PF ISN randomization. Or in trekkie techno-babble, ISN phase modulation.Mike Frantzen
2001-08-25Casting of lhs, is not what you think it is.Niklas Hallqvist
2001-08-24move back to requested snaplen after SIGHUP; canacar@eee.metu.edu.trTheo de Raadt
2001-08-24rearrange so that snaplen cannot be changed; canacar@eee.metu.edu.trTheo de Raadt
2001-08-24corrections; wouter.clarie@pandora.beTheo de Raadt
2001-08-24Send DELETE notifications for all active SAs when we shut down the daemon.Hakan Olsson
2001-08-24Initial IPCOMP support.Hakan Olsson
2001-08-24I was only going to remove #include "init.h", but found 8 moreHakan Olsson
2001-08-24typo in debug msgHakan Olsson
2001-08-23Make the wildcard address use SO_REUSEPORT, so multiple instances ofAngelos D. Keromytis
2001-08-23Reinitialize transports on SIGUP.Angelos D. Keromytis
2001-08-23Update (SPD entries are deleted when SPI is removed, and new addressesAngelos D. Keromytis
2001-08-23Use ipsec_id_string as the section name for IKE mode config.Niklas Hallqvist
2001-08-23Correct ipsec_id_string buffer and length handling.Niklas Hallqvist
2001-08-23Compile on old systems, my version.Niklas Hallqvist
2001-08-23RSA-enabling is not necessary anymore.Niklas Hallqvist
2001-08-23ignore EEXIST for SPDADD on KAME; ok ho@Markus Friedl
2001-08-23sync w/ netbsdMarkus Friedl
2001-08-23recieve -> receiveAaron Campbell
2001-08-23o for a port_item, initialize the "next" pointer to NULLTodd C. Miller
2001-08-23Support var="string". Expansion (at lex time) done using $var, for instance:Theo de Raadt
2001-08-23KNFTheo de Raadt
2001-08-23for -s all, do not error out when the first ioctl failsTheo de Raadt
2001-08-23fix usageTheo de Raadt
2001-08-23do not permit snaplen change on an active log fileTheo de Raadt
2001-08-22Revert last change.Hakan Olsson
2001-08-22Compile on older systems.Hakan Olsson
2001-08-22use ipsec_id_string() when generating rawkey file names.Hakan Olsson
2001-08-22ftp-proxyBob Beck
2001-08-22If we fail to get a key from DNSSEC, RAWKEY can still succeed.Hakan Olsson
2001-08-22Modify as per deraadt@'s wishes. aaron@ ok.Hakan Olsson
2001-08-22clarify tcpdump use; frantzenTheo de Raadt
2001-08-22Add an example.Hakan Olsson
2001-08-22Add a manual page.Hakan Olsson
2001-08-22DNS KEY RR values.Hakan Olsson
2001-08-22Cleanup and style fixes. Use getopt().Hakan Olsson
2001-08-22properly handle empty log fileTheo de Raadt
2001-08-22USER_FQDN ID support, untested.Hakan Olsson
2001-08-22IPCOMP policy control should be optional for backwardNiklas Hallqvist
2001-08-22Alphabeticize extern decls.Niklas Hallqvist
2001-08-22Add ipsec_id_string, a function for converting IDs to on epossibleNiklas Hallqvist
2001-08-22Need an extra sa_release() when de-allocating exchange-associated SAs;Angelos D. Keromytis
2001-08-22Bypass IPCOMP too.Niklas Hallqvist
2001-08-21pflogd; work by canacar@eee.metu.edu.tr and myselfTheo de Raadt
2001-08-21Remove /usr/bin/mkfifo link -- mkfifo has lived in /sbin for severalTodd C. Miller
2001-08-20Powered by @mantoya.Mike Pechkin
2001-08-19do not spin if no states are foundTheo de Raadt
2001-08-19Document per-rule byte counter.Daniel Hartmeier
2001-08-19Add per-rule byte counter, so mickey can do accounting. We're counting theDaniel Hartmeier
2001-08-19Document per-rule statistics. If the evaluation counters look funny,Daniel Hartmeier