Age | Commit message (Collapse) | Author |
|
add some of vfs.*.
(not really sure about other potion).
|
|
|
|
with certain rule configurations:
* don't add TCP state if it is an RST packet and (attempt) to send out
RST/ICMP packets in a manner that bypasses IP Filter.
|
|
|
|
|
|
|
|
|
|
in particular expose vfs.nfs.iothreads, which is a replacement
for nfsiod kludge.
this is not a netbsd port-over, since this particular
implementation builds up the needed variable indexes dynamically
(using the already existing `generic' vfs variables),
as opposed to netbsd which relies on static matching w/ kernel
definitions and configuration...
man changes to come soon.
|
|
|
|
|
|
|
|
for man pages.
|
|
|
|
when the monitor is blanked.
|
|
|
|
|
|
(hide kame ifidx hack)
|
|
it the same as the space we reserver on i386 to avoid fdisk trouncing.
The user can change this via the 'b' command and a message is printed
at startup to this effect.
|
|
so we don't get an error that inadvertainly causes the entry
to get exported to the world. Also keep a count of unresolved hosts
and error out sanely on lines w/ no resolvable hosts. Work by
myself and provos@
|
|
author: ho
style fix
author: ho
Create report files with umask 077
|
|
author: niklas
style fascism
author: ho
style fix
author: ho
Typo in comment.
author: ho
Typo; Cers-directory -> Cert-directory
author: ho
Do not load configuration if isakmpd.conf is not owned by the user running
isakmpd. Also, do not load config if file modes are too open.
Do not warn about ignored duplicate tags when they are autogenerated.
author: niklas
From ho: provide defaults for requested transforms, shortens config files
vastly.
|
|
samples/singlehost-west.conf: Merge with EOM 1.8
author: niklas
Remove unnecessary configuration data
|
|
|
|
|
|
|
|
author: niklas
pasto
author: niklas
New short samples
|
|
author: ho
Zap now redundant config data (75% actually).
|
|
ui.c: Merge with EOM 1.41
author: niklas
From ho: provide defaults for requested transforms, shortens config files
vastly.
|
|
author: niklas
Describe PKI setup
author: ho
Mention requirement for config file owner and mode.
author: niklas
save pid in a pidfile, based on code from Lawrence A. Wimble. Also retry
to dlopen libcrypto after SIGHUP, useful if /usr was mounted in between.
|
|
author: angelos
Move POLICY_FILE_DEFAULT definition to the .h file.
|
|
author: niklas
Argh I always manage to commit my local DEBUG=-g change by mistake
author: niklas
oops in last commit
author: niklas
Install sample files
|
|
author: niklas
Consolidate PID writers
author: niklas
save pid in a pidfile, based on code from Lawrence A. Wimble. Also retry
to dlopen libcrypto after SIGHUP, useful if /usr was mounted in between.
author: ho
Write pid file on start. (angelos@ ok)
|
|
author: ho
Add initial text on auto-generated parts of the configuration.
Reorder example somewhat.
author: niklas
Doc fixes from OpenBSD
|
|
author: provos
fix arguments in debug message for sa_setup_expirations
|
|
author: ho
Typo in comment.
author: ho
Typo; Cers-directory -> Cert-directory
author: ho
Do not load configuration if isakmpd.conf is not owned by the user running
isakmpd. Also, do not load config if file modes are too open.
Do not warn about ignored duplicate tags when they are autogenerated.
author: niklas
From ho: provide defaults for requested transforms, shortens config files
vastly.
|
|
author: angelos
Fix typo.
author: angelos
Add etherip and protocol numbers in the transport protocol entries,
document.
|
|
author: niklas
style
author: angelos
Move POLICY_FILE_DEFAULT definition to the .h file.
author: angelos
Add etherip and protocol numbers in the transport protocol entries,
document.
|
|
author: niklas
New short samples
|
|
|
|
|
|
properly.
|
|
|
|
This patch fixes mostly ICMP timeout problems, as the ftp proxy
changes were imported previously.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|