summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2004-06-21Implement NAT-T keepalive messages.Hakan Olsson
2004-06-21Update manpage to reflect changes in anchor namingMathieu Sauve-Frankel
2004-06-21udpencap_port should be taken from dst transportHakan Olsson
2004-06-21When switching from main to encap transport, copy dst port ifHakan Olsson
2004-06-21Strip away umask bits in monitor_fopen(). hshoexer@ ok.Hakan Olsson
2004-06-21style nitHakan Olsson
2004-06-21undo double-patch; Dries SchellekensMarkus Friedl
2004-06-21Don't write too much IKE data in packet captureHakan Olsson
2004-06-21Packet capture should add the ESP-marker when NAT-T is active.Hakan Olsson
2004-06-21dont compare int with NULL, compare to 0 instead, otto@ okAnil Madhavapeddy
2004-06-21Tell the kernel to enable ESP-in-UDP encapsulation when we haveHakan Olsson
2004-06-21Port floating (500->4500) for p1 and p2 exchanges.Hakan Olsson
2004-06-20message_parse_payloads should accept payloads in the private range.Hakan Olsson
2004-06-20Make the payload array in struct message dynamic, since we need to handleHakan Olsson
2004-06-20NAT-Traversal for isakmpd. Work in progress...Hakan Olsson
2004-06-20A start towards Dead Peer Detection (DPD) support, as specified in RFC 3706Hakan Olsson
2004-06-20Some vendors send the last Aggressive Mode message unencrypted, which weHakan Olsson
2004-06-20To make debugging the unprivileged child process easier, make 'isakmpd -dd'Hakan Olsson
2004-06-19require RTF_MPATH to enter a multipath route with RTM_ADD.Cedric Berger
2004-06-18Make this better reflect reality; OK and with help from CedricTodd C. Miller
2004-06-17Yet another bunch of memleask found and fixed by Patrick Latifi. Thanks!Hans-Joerg Hoexer
2004-06-17Plug a memleak. Found and fixed (and some cleanup) by Patrick Latifi.Hans-Joerg Hoexer
2004-06-17Evaluate result of X509_verify_cert() more carefully.Hans-Joerg Hoexer
2004-06-16Fix wrong pointer dereference and plug memleak. Found and patch byHans-Joerg Hoexer
2004-06-16fix ipv6-address and ipv6-address-mask mixup.Hans-Joerg Hoexer
2004-06-16Fix -S flag with new show code. ok claudio@Cedric Berger
2004-06-15Cleanup last commit here:Todd C. Miller
2004-06-15do not crash on 'route flush'Theo de Raadt
2004-06-15also use MSG_AUTHENTICATED flag.Hans-Joerg Hoexer
2004-06-14Remove unused functions. ok beck@ henning@Cedric Berger
2004-06-14avoid stat before openHans-Joerg Hoexer
2004-06-14added a missing message_free().Hans-Joerg Hoexer
2004-06-14KNF, style, 80c, etc. hshoexer@ okHakan Olsson
2004-06-12Fix table add/replace commands with securelevel=2.Cedric Berger
2004-06-12Make route show output similar to netstat -r output.Claudio Jeker
2004-06-11typo in commentBrad Smith
2004-06-10Work around an uncovered gcc problem on m88k until it receives proper cure.Miod Vallat
2004-06-10rename struct pf_rule_addr member 'not' to 'neg', as 'not' is a reservedDaniel Hartmeier
2004-06-10Mark authenticated messages explicitly. Better check for authentication beforeHans-Joerg Hoexer
2004-06-09Fix IPv4 name->address translation. Addresses like "10.1000" will not beCedric Berger
2004-06-09Style nits. hshoexer@ okHakan Olsson
2004-06-09only accept DELETEs during an authenticated INFORMATIONAL exchange.Hans-Joerg Hoexer
2004-06-09correct mistake in usage(). Chris PinnockJun-ichiro itojun Hagino
2004-06-06- wordingJason McIntyre
2004-06-06add new "-src" and "-srcmask" modifiers to make it possible to add a sourceCedric Berger
2004-06-06Style (KNF, 80c). No binary change.Hakan Olsson
2004-06-0664bit int fixesTed Unangst
2004-06-03fall back to "nobody" when the _dhcp user is not available, theo bob okHenning Brauer
2004-06-02remove unused BIO-functions.Hans-Joerg Hoexer
2004-05-30interface description, tweaked by deraadt and jcs;Jason McIntyre