Age | Commit message (Collapse) | Author | |
---|---|---|---|
2006-05-28 | Add support for NFS mounts to be from non-reserved ports: | Anil Madhavapeddy | |
- new sysctl vfs.nfs.privport to require NFS mount requests to be on reserved ports when set to 1 (the default). - mountd now automatically sets the sysctl depending on the -n flag. - add mountd_flags to rc.conf to enable the -n flag at boot. deraadt@ ok | |||
2006-05-28 | use <machine/endian.h> to figure what we are running on instead of defining | Martin Reindl | |
our own macros | |||
2006-05-28 | when parsing host specifications, initialize host address queue pointers, not | Hans-Joerg Hoexer | |
used yet. | |||
2006-05-28 | prepare for rule expansion. Get rid of addr_node, link struct | Hans-Joerg Hoexer | |
ipsec_addr_wrap directly. | |||
2006-05-28 | kill trainling whitespace | Hans-Joerg Hoexer | |
2006-05-28 | whoops, undo last commit. Of course, set_ipmask() is needed... | Hans-Joerg Hoexer | |
2006-05-28 | this one not needed yet. | Hans-Joerg Hoexer | |
2006-05-28 | fill in AF_INET6 cases | Todd T. Fries | |
this does not complete v6 support for ipsecctl, but makes progress ok hshoexer@ | |||
2006-05-28 | Assign a finalization event to the exchange initiated on soft expiry. | Ryan Thomas McBride | |
If the exchange fails, the existing phase 1 SA is invalidated and the exchange is retried at the Exchange-Max-Time interval until the SA hard timeout expires. Another sasyncd-related fix from nathanael at polymorpheous dot com ok ho@ hshoexer@ | |||
2006-05-28 | also report SA flags. | Hans-Joerg Hoexer | |
2006-05-28 | revert a part of last commit causes newline | Thordur I. Bjornsson | |
proplems during boot. pointed out by sturm@ | |||
2006-05-28 | matching brackets are useful | Todd T. Fries | |
ok dlg@ | |||
2006-05-28 | apropriate -> appropriate | Jason McIntyre | |
2006-05-28 | missing `Ar'; | Jason McIntyre | |
2006-05-28 | Make per-rule adaptive timeouts behave the same way as the global adaptive | Ryan Thomas McBride | |
timeouts. | |||
2006-05-28 | Enable adaptive timeouts by default, with adaptive.start of 60% of the | Ryan Thomas McBride | |
state limit and adaptive.end of 120% of the state limit. Explicitly setting the adaptive timeouts will override the default, and it can be disabled by setting both adaptive.start and adaptive.end to 0. ok henning@ | |||
2006-05-28 | Change the default replay window for SAs created by the isakmpd responder | Ryan Thomas McBride | |
to be DEFAULT_REPLAY_WINDOW instead of zero. The default replay window is then the same for both initiator and receiver. Fix from nathanael at polymorpheous dot com. ok hshoexer@ | |||
2006-05-28 | add ERANGE error detection, found when looking at bgpd's parse.y | Todd T. Fries | |
ok hshoexer@ | |||
2006-05-27 | Document net.inet6.ip6.mforwarding | Claudio Jeker | |
2006-05-27 | newline fix + s/perror/xperror since we are | Thordur I. Bjornsson | |
using a home rolled version. ok pedro@ | |||
2006-05-27 | Kill some lint warnings by changing some variables to more | Moritz Jodeit | |
appropriate types and change some strtoul() to use strtonum(). ok deraadt@ | |||
2006-05-27 | document modp3072. | Hans-Joerg Hoexer | |
2006-05-27 | replace ipsecadm with ipsecctl. ok and requested by deraadt@ | Hans-Joerg Hoexer | |
2006-05-27 | Kill unused Aflag support that sneeked in via netstat code. | Claudio Jeker | |
2006-05-27 | Do not print an error in case of ENOPROTOOPT. Install medias do not have | Claudio Jeker | |
IPSec support and so will print a "route: spd-sysctl-estimate: Protocol not available" on upgrades. Requested and ok deraadt@ | |||
2006-05-27 | Adresses can be specified in CIDR notation, as symbolic host names, interface | Hans-Joerg Hoexer | |
names or interface group names. So it's time to document this... | |||
2006-05-27 | allow to specify groups to be used IKE | Hans-Joerg Hoexer | |
2006-05-27 | add group15/modp3072 to default configurations. | Hans-Joerg Hoexer | |
2006-05-26 | ipsectl -> ipsecctl | Jason McIntyre | |
2006-05-26 | vpn.8 removal; | Jason McIntyre | |
2006-05-26 | let us not talk about ipsecadm and vpn anymore; ok reyk | Theo de Raadt | |
2006-05-26 | \<char> is <char> except for \<newline> -- no exceptions. much like how | Theo de Raadt | |
other things work. ok henning | |||
2006-05-26 | Assign locator.target to blink structure. | Marco Peereboom | |
2006-05-25 | handle Online/Scrub SD state for marco | Theo de Raadt | |
2006-05-25 | more room for seconds string | Theo de Raadt | |
2006-05-25 | print seconds of progress, if driver makes it available; ok marco | Theo de Raadt | |
2006-05-25 | handle new volume status, and print % if known; ok marco | Theo de Raadt | |
2006-05-23 | member interfaces of groups might have no IPs and ifa_lookup retun NULL, | Henning Brauer | |
account for that. fixes PR5130, ok dhartmei | |||
2006-05-23 | remove reference to spppcontrol, which rests in peace in the Attic | Reyk Floeter | |
ok brad@ | |||
2006-05-21 | Pretty print netmasks in monitor mode. | Marco Pfatschbacher | |
From Alexander Bluhm <Alexander_Bluhm at genua.de> OK henning@ | |||
2006-05-18 | paramter -> parameter | Miod Vallat | |
2006-05-17 | various fixes; | Jason McIntyre | |
2006-05-17 | Document recent sysctl additions. | Gordon Willem Klok | |
ok jmc@, deraadt@ | |||
2006-05-17 | implement support for sppp(4) in ifconfig. have a look at the updated | Reyk Floeter | |
manual pages pppoe(4) and sppp(4) for examples. the spppcontrol(8) utility is not required anymore and will probably be removed in the near future. ok deraadt@ | |||
2006-05-16 | change only use of slice to 'partition letter' to be consistent with | Kevin Steves | |
use of partition everywhere else; ok jmc@ | |||
2006-05-15 | permit proto 0; ok hshoexer | Theo de Raadt | |
2006-05-15 | whitespace cleanup | Felix Kronlage | |
ok claudio@, mbalmer@ | |||
2006-05-15 | delete weird C | Theo de Raadt | |
2006-05-14 | better english to describe interfaces without bandwidth info; ok henning | Theo de Raadt | |
2006-05-12 | put back original getopt(3) handling lost during the update | Martin Reindl | |