summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2005-11-04crank pf_state and pf_src_node byte and packet counters to u_in64_t, sinceRyan Thomas McBride
we're breaking pfsync compatibility this cycle anyways. Requested by djm@, ok henning@, 'wheee!' deraadt@
2005-11-01missing freeaddrinfo(); maticd@gmail.comTheo de Raadt
2005-10-30- SEE ALSO is sorted by section firstJason McIntyre
- new sentence, new line
2005-10-30prepare for more flexible hostname resolver. Right now just v4, more to comeHans-Joerg Hoexer
(if groups, v6, dns).
2005-10-30Xr ipcomp, sort "SEE ALSO" sectionHans-Joerg Hoexer
2005-10-30describe ipcompHans-Joerg Hoexer
2005-10-30add support for ipcomp.Hans-Joerg Hoexer
2005-10-28Make it possible to use -P on readonly memory filesystems. FromOtto Moerbeek
Alexander Hall, with some guidance by me. ok deraadt@
2005-10-28Change some TAILQ_FIRST() == NULL tests into TAILQ_EMPTY(). The firstOtto Moerbeek
form is valid, but in these cases its more clear to say what you mean. ok pat@ henning@
2005-10-28more error message cleanupHans-Joerg Hoexer
2005-10-27Do not touch LIST_* macro internals.Hans-Joerg Hoexer
with otto@, ok ho@
2005-10-26don't send DPD messages before the exchange is finialized, otherwiseMarkus Friedl
we have a race between DPD and exchange timeouts and both will release the SA and corrupt the SA list. ok hshoexer@, ho@
2005-10-26put the 100% right r1.79 back in, that is still as right as it was the firstHenning Brauer
time. dale just had the same problem and made me look again.
2005-10-25some small knf, ok ho@Hans-Joerg Hoexer
2005-10-25Do not send a message when no transport is available.Hans-Joerg Hoexer
ok cloder ho
2005-10-24delete more EFAULT stupidityTheo de Raadt
2005-10-23Add support for SENSOR_AMPS.Mark Kettenis
ok dlg@
2005-10-18add support for static interface group expansion, i. e.Henning Brauer
pass to group ok hshoexer, hacked at linux-kongress last week
2005-10-17parse correctly flows using ipcomp. Glitch noticed by jared rr spiegel.Hans-Joerg Hoexer
2005-10-16Prepare for better host specification parser: dns names, interfaces, etc. ButHans-Joerg Hoexer
for now, just ipv4. Derived from pfctl(8).
2005-10-16Unset debug flag.Hans-Joerg Hoexer
2005-10-16Add keyword "any" for addresses, reduces to "0.0.0.0/0".Hans-Joerg Hoexer
2005-10-16cleanup messages generated by err(3)Hans-Joerg Hoexer
2005-10-15Use queue macros instead of directly accessing fields. ok miod@ aaron@Otto Moerbeek
jaredy@ patrick@ millert@
2005-10-13unused parametersHenning Brauer
2005-10-13dead definesHenning Brauer
2005-10-10getifaddrs() slightly later in printif(), prevents possible memleakHenning Brauer
Andrey Matveev <evol@online.ptt.ru>
2005-10-07Don't display errno message when errno isn't set.Pedro Martelletto
Okay deraadt@, moritz@, help and okay henning@
2005-10-06improve examples and show how to use KEY_LENGTH. Slightly different fix thanHans-Joerg Hoexer
proposed by sthen at spacehopper dot org, fixes pr 4522, thanks! ok and with jmc@
2005-10-06Use part of the reserved space on the disk inode to scatter 16 more bitsPedro Martelletto
for the UID and GID, making them 32-bit. Based on what Linux does, with a slightly different implementation. Endianess issue in fsck noted by miod@, okay deraadt@.
2005-10-05Add multicast routing to GENERIC.Esben Norby
It is now possible to enable multicast routing in the kernel with the sysctl option net.inet.ip.mforwarding=1 Based on intial work by msf@ help claudio@ ok claudio@ deraadt@
2005-10-04wording from simon kuhnle (pr #4530);Jason McIntyre
2005-10-03print all trunk flagsReyk Floeter
ok brad@
2005-09-30deploy .An -nosplit; ok jmcJared Yanovich
2005-09-27add examples of explicitly bringing ethernet ifs up;Jason McIntyre
from stefek zaba; ok deraadt@
2005-09-27document aesctr and null encryption; ok jmc, hshoexerMarkus Friedl
2005-09-27missing returnMarkus Friedl
2005-09-23- beef up DESCRIPTIONJason McIntyre
- document that paths to key files may be relative or absolute - reference vpn(8) in SEE ALSO most of this diff came about from a mail from benjamin pineau who mailed hshoexer and myself about some possible improvements to this file; ok hshoexer@
2005-09-23Document new UI commandsHans-Joerg Hoexer
ok and help jmc@
2005-09-23Provide UI commands to delete phase 1 SAs.Hans-Joerg Hoexer
Looks good mortiz@
2005-09-23Remove some uncommented section headers from the template man page (RETURNHans-Joerg Hoexer
VALUES, BUGS, CAVEATS,...). While there, add HISTORY section.
2005-09-22use "force" keyword when adding to Phase 1 section, otherwise isakmpd willHans-Joerg Hoexer
write some annyoing warning to the logs...
2005-09-21put description of `dest_address' in the right place;Jason McIntyre
ok deraadt@
2005-09-20if we must un-export, only un-export when we do the first call forTheo de Raadt
each filesystem; ok drahn, specific issue found by otto
2005-09-20add an entry to "Phase 1" section for each remote peer.Hans-Joerg Hoexer
2005-09-20add a "Connection=..." entry for active connectionsHans-Joerg Hoexer
2005-09-19grammar;Jason McIntyre
from benjamin pineau; ok hshoexer@
2005-09-15Clean up compilation with -Wall, okay deraadt@Pedro Martelletto
From: Leonardo Chiquitto Filho <leonardo@iken.com.br>
2005-09-13Only DELEXPORT filesystems which are not exported. Removes NFS race whenDale Rahn
mounting filesystems on nfs servers. Improvements and ok otto@
2005-09-06document `what' from interactive mode: from ely petty;Jason McIntyre
kill an unneeded .Pp whilst here;