Age | Commit message (Expand) | Author |
2012-07-14 | replace (somewhat) magic numbers with constants | Alexander Hall |
2012-07-14 | ansify | Alexandr Shadchin |
2012-07-14 | fix typo in comment | Alexandr Shadchin |
2012-07-14 | zap whitespace | Alexandr Shadchin |
2012-07-13 | small tweak; | Jason McIntyre |
2012-07-13 | Change the configuration format fed to the isakmpd FIFO to be able | Mike Belopuhov |
2012-07-13 | Replace a '512' with DEV_BSIZE. Calculate physmem size in blocks and | Kenneth R Westerback |
2012-07-13 | Support additional MODP DH groups in the Phase 1 and Phase 2. | Mike Belopuhov |
2012-07-13 | allow destination/prefixlen syntax for ipv6 routes. | Sebastian Benoit |
2012-07-13 | Use NULL instead of 0 for pointers | Alexandr Shadchin |
2012-07-11 | MBR can't handle the truth. | Kenneth R Westerback |
2012-07-11 | Simplify guts and calling of getuint(). Eliminate a useless 'help' | Kenneth R Westerback |
2012-07-10 | Rename "life" to "lifetime" to match iked. | Lawrence Teo |
2012-07-10 | disable lidsuspend on shutdown | Alexander Hall |
2012-07-10 | use PFSTATE_SCRUBMASK | Henning Brauer |
2012-07-10 | Allow an implicit address family for af-to rules. If the address | Alexander Bluhm |
2012-07-10 | intermediate hack^Wugly "fix" to prevent spurious "scrub ()" prints | Henning Brauer |
2012-07-10 | set { ... } -> set ( ... ) | Henning Brauer |
2012-07-09 | Fix typo in warning message. | Lawrence Teo |
2012-07-09 | We always want to do unit conversions. So flags parameter of getuint() | Kenneth R Westerback |
2012-07-09 | I want some of what kjell was smoking 10 years ago when he added | Kenneth R Westerback |
2012-07-09 | Make 'swap' command work like fdisk(8) says -- you must supply two valid | Kenneth R Westerback |
2012-07-09 | Terminate with extreme prejudice the multiple timeout queuing | Kenneth R Westerback |
2012-07-09 | fix some of the confusion we have in pf regarding filter criteria vs | Henning Brauer |
2012-07-09 | Revert previous. | Kenneth R Westerback |
2012-07-09 | Use strtonum() instead of strtol() inside ask_num(). Many overflows | Kenneth R Westerback |
2012-07-08 | set_pid() does not need prompt string, low or high parameters. These | Kenneth R Westerback |
2012-07-08 | Disallow manual security associations that use AES-CTR, AES-GCM, | Christian Weisgerber |
2012-07-08 | New attempt to make the -P flag work with -ss, so that states can be | Lawrence Teo |
2012-07-08 | Split out an ask_pid() function rather than over-parameterizing the | Kenneth R Westerback |
2012-07-08 | Return EROFS when a read-write mount of a read-only sd(4) device | Kenneth R Westerback |
2012-07-08 | Call Xsetpid() to edit the partition type from Xedit() rather than | Kenneth R Westerback |
2012-07-08 | if you use nitems() in userland, you must define it yourself | Theo de Raadt |
2012-07-08 | Nuke useless EDIT() #define in Xsetpid. | Kenneth R Westerback |
2012-07-08 | Replace tricker atoi() and hand rolled parsing with strsep() and | Kenneth R Westerback |
2012-07-07 | copy&paste mistake in error message | Christian Weisgerber |
2012-07-07 | remove incorrect check in pfctl preventing set-tos for ipvshit. | Henning Brauer |
2012-07-07 | rename prio in struct pf_rule and related structs to set_prio so it is | Henning Brauer |
2012-07-07 | Replace atoi() with strtonum() where it's easy. Make related error | Kenneth R Westerback |
2012-07-05 | don't output "esn" string in the rule section as we can't use the | Mike Belopuhov |
2012-07-05 | when rekeying ike sa copy more info from the old one; | Mike Belopuhov |
2012-07-03 | Improve the key derivation function to produce correct keying material | Mike Belopuhov |
2012-07-02 | checking state flags make sense only when processing a response | Mike Belopuhov |
2012-07-02 | augment every sa_free call with a debugging log message | Mike Belopuhov |
2012-07-02 | Don't close IKE SA immediately after creating a new one when rekeying. | Mike Belopuhov |
2012-07-02 | a state machine is not worth the trouble when you've got a flag. doh! | Mike Belopuhov |
2012-06-30 | enable use of AES-{192,256}-CTR, and explicitly of AES-128-CTR, for IPsec ESP | Christian Weisgerber |
2012-06-29 | Add missing ESN bits | Mike Belopuhov |
2012-06-29 | Print esn flag when dumping SAs with ESN enabled | Mike Belopuhov |
2012-06-28 | prevent salt_len overflow; reported by andrew nelless, ok otto, tedu | Mike Belopuhov |