summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2006-05-29add ipsecctl_free_rule() for cleaning up rules.Hans-Joerg Hoexer
2006-05-29revert vfs.nfs.privport sysctl, broke a few architecturesAnil Madhavapeddy
2006-05-29unify code a little bit (consistent variable names).Hans-Joerg Hoexer
2006-05-29Also return proper list of addresses for interface groups.Hans-Joerg Hoexer
2006-05-29As the rule expansion is now aware of host lists, host_if() has toHans-Joerg Hoexer
2006-05-29teach expand_rule() to iterate over host lists, not used yet.Hans-Joerg Hoexer
2006-05-29fix rule numbering (for -vv)Hans-Joerg Hoexer
2006-05-29Do not use C++ comments. Noticed by markus.Hans-Joerg Hoexer
2006-05-29export pf_key_v2_disable_sa() (unbreaks build)Markus Friedl
2006-05-29Oops, return after calling sa_release()Ryan Thomas McBride
2006-05-29Fix broken merge of patch. Pointed out by nathanael at polymorpheus dot com.Ryan Thomas McBride
2006-05-29Change MBR_read() and MBR_write() to return -1 on error and setRay Lai
2006-05-29merge expand_sa() and expand_rule().Hans-Joerg Hoexer
2006-05-29move generation of reverse flow rules to seperat function.Hans-Joerg Hoexer
2006-05-29unify expansion of SA rules. Needed for general rule expansion.Hans-Joerg Hoexer
2006-05-28Add support for NFS mounts to be from non-reserved ports:Anil Madhavapeddy
2006-05-28use <machine/endian.h> to figure what we are running on instead of definingMartin Reindl
2006-05-28when parsing host specifications, initialize host address queue pointers, notHans-Joerg Hoexer
2006-05-28prepare for rule expansion. Get rid of addr_node, link structHans-Joerg Hoexer
2006-05-28kill trainling whitespaceHans-Joerg Hoexer
2006-05-28whoops, undo last commit. Of course, set_ipmask() is needed...Hans-Joerg Hoexer
2006-05-28this one not needed yet.Hans-Joerg Hoexer
2006-05-28fill in AF_INET6 casesTodd T. Fries
2006-05-28Assign a finalization event to the exchange initiated on soft expiry.Ryan Thomas McBride
2006-05-28also report SA flags.Hans-Joerg Hoexer
2006-05-28revert a part of last commit causes newlineThordur I. Bjornsson
2006-05-28matching brackets are usefulTodd T. Fries
2006-05-28apropriate -> appropriateJason McIntyre
2006-05-28missing `Ar';Jason McIntyre
2006-05-28Make per-rule adaptive timeouts behave the same way as the global adaptiveRyan Thomas McBride
2006-05-28Enable adaptive timeouts by default, with adaptive.start of 60% of theRyan Thomas McBride
2006-05-28Change the default replay window for SAs created by the isakmpd responderRyan Thomas McBride
2006-05-28add ERANGE error detection, found when looking at bgpd's parse.yTodd T. Fries
2006-05-27Document net.inet6.ip6.mforwardingClaudio Jeker
2006-05-27newline fix + s/perror/xperror since we areThordur I. Bjornsson
2006-05-27Kill some lint warnings by changing some variables to moreMoritz Jodeit
2006-05-27document modp3072.Hans-Joerg Hoexer
2006-05-27replace ipsecadm with ipsecctl. ok and requested by deraadt@Hans-Joerg Hoexer
2006-05-27Kill unused Aflag support that sneeked in via netstat code.Claudio Jeker
2006-05-27Do not print an error in case of ENOPROTOOPT. Install medias do not haveClaudio Jeker
2006-05-27Adresses can be specified in CIDR notation, as symbolic host names, interfaceHans-Joerg Hoexer
2006-05-27allow to specify groups to be used IKEHans-Joerg Hoexer
2006-05-27add group15/modp3072 to default configurations.Hans-Joerg Hoexer
2006-05-26ipsectl -> ipsecctlJason McIntyre
2006-05-26vpn.8 removal;Jason McIntyre
2006-05-26let us not talk about ipsecadm and vpn anymore; ok reykTheo de Raadt
2006-05-26\<char> is <char> except for \<newline> -- no exceptions. much like howTheo de Raadt
2006-05-26Assign locator.target to blink structure.Marco Peereboom
2006-05-25handle Online/Scrub SD state for marcoTheo de Raadt
2006-05-25more room for seconds stringTheo de Raadt