summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2001-09-17sync actual with flags with usage and man pageassar
art@ ok
2001-09-15Implement return-icmp(number), return-icmp6(number)Peter Stromberg
Differentiate between return-icmp and return-icmp6, icmp-type and ipv6-icmp-type. ok dhartmei@
2001-09-15ICMP6_DST_UNREACH_NOROUTE <-> _ADMIN, reported by Wouter Coene.Daniel Hartmeier
2001-09-15Fix 'binat ... to any ...' (binat.af wasn't set).Daniel Hartmeier
2001-09-15add mtu description, from Phil Pennock <Phil.Pennock@globnix.org>Michael Shalayeff
2001-09-15add EXAMPLES section; canacar@eee.metu.edu.tr, ok deraadt@Jakob Schlyter
2001-09-15Parse bug, found by wilfried@Daniel Hartmeier
2001-09-15IPv6 support from Ryan McBride (mcbride@countersiege.com)Mike Frantzen
2001-09-12check calloc() return valueMarkus Friedl
2001-09-08o Mention /etc/wsconsctl.conf in wsconsctl(8)Heikki Korpela
o Sync pckbd(4) with wsconsctl(8); you need wsconsctl -w keyboard.encoding= instead of wsconsctl -w encoding= pckbd(4) error noticed by Philipp Buehler. mickey@ ok
2001-09-06- you can only binat between hostsjasoni
- add binat example and description
2001-09-061:1 bidrectional NAT (binat); ok dhartmei@ and frantzen@jasoni
2001-09-06Initial idea from aaron@: Last char of .Xr group in SEE ALSO section shouldMike Pechkin
be a single digit. Powered by mantoya@. millert@ ok.
2001-09-06double word.Jan-Uwe Finck
2001-09-05make sure that va_start() has matching va_end()Theo de Raadt
2001-09-04Support parameter lists {} for interfaces in filter rules, likeDaniel Hartmeier
pass in on { gm0, kue0 } from any to any
2001-09-03fix spellingsTheo de Raadt
2001-09-03Include su# in generated disktab. Because modern disks have a variableTodd C. Miller
number of sectors/track we need to specify the total number of sectors per unit explicitly. Closes PR #2042.
2001-09-02Print rule numbers zero-based. Noted by primus@gblx.net.Daniel Hartmeier
2001-09-01Changes to build platform specific files properly with the powerpc -> macppcDale Rahn
port rename. This adds support for some of these to mvmeppc when it becomes MACHINE_ARCH=powerpc, as MACHINE_ARCH is tested in some instances. ancontrol and wicontrol are MACHINE_ARCH changes.
2001-08-31(c)-2001Hakan Olsson
2001-08-30Mention which debug levels we currently use.Hakan Olsson
2001-08-29kill the -i option; it just causes all sorts of grief; canacar@eee.metu.edu.trTheo de Raadt
2001-08-28move '!' from host_list to host: "xhost : '!' host | host;"; ok dhartmei@Markus Friedl
2001-08-28check for malloc/strdup == NULLMarkus Friedl
2001-08-28Support ! operator in host parameter lists. Fixes PR system/2030. ReportedDaniel Hartmeier
by Kamil Andrusz <wizz@mniam.net>.
2001-08-28Bump state timeouts and allow tweaking them from pfctl.Mike Frantzen
(The state timeouts need some _serious_ tuning)
2001-08-27Compile on alpha.Hakan Olsson
2001-08-27doc improvements; canacar@eee.metu.edu.trTheo de Raadt
2001-08-27un-borkTheo de Raadt
2001-08-26minor cleanupsTheo de Raadt
2001-08-26sort keywordsTheo de Raadt
2001-08-26more styleNiklas Hallqvist
2001-08-25Enable IKE mode config, as it works ok with PGPnet and at least has a usableNiklas Hallqvist
configuration method. Documentation will follow.
2001-08-25Use x509_DN_string API. Style fixes.Niklas Hallqvist
2001-08-25Add x509_DN_string API to get a printable DN component given oneNiklas Hallqvist
rpresented in ASN.1
2001-08-25StyleNiklas Hallqvist
2001-08-25PF ISN randomization. Or in trekkie techno-babble, ISN phase modulation.Mike Frantzen
2001-08-25Casting of lhs, is not what you think it is.Niklas Hallqvist
2001-08-24move back to requested snaplen after SIGHUP; canacar@eee.metu.edu.trTheo de Raadt
2001-08-24rearrange so that snaplen cannot be changed; canacar@eee.metu.edu.trTheo de Raadt
2001-08-24corrections; wouter.clarie@pandora.beTheo de Raadt
2001-08-24Send DELETE notifications for all active SAs when we shut down the daemon.Hakan Olsson
This "clean" shutdown happens on SIGTERM ('kill <pid>') or if a 'Q' command is input to the fifo UI. Suggested by <Ghislaine.Labouret@hsc.fr>.
2001-08-24Initial IPCOMP support.Hakan Olsson
2001-08-24I was only going to remove #include "init.h", but found 8 moreHakan Olsson
#include's we don't need here.
2001-08-24typo in debug msgHakan Olsson
2001-08-23Make the wildcard address use SO_REUSEPORT, so multiple instances ofAngelos D. Keromytis
isakmpd can run on the same machine and reuse the wildcard address. This is intended mostly for debugging and testing purposes, so multiple listener issues are not relevant.
2001-08-23Reinitialize transports on SIGUP.Angelos D. Keromytis
2001-08-23Update (SPD entries are deleted when SPI is removed, and new addressesAngelos D. Keromytis
are identified on a SIGUP or INADDR_ANY packet).
2001-08-23Use ipsec_id_string as the section name for IKE mode config.Niklas Hallqvist