summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2000-01-26Merge with EOM 1.45Niklas Hallqvist
date: 2000/01/25 06:51:20; author: angelos; state: Exp; lines: +2 -3 Unneeded variable. date: 2000/01/25 06:50:51; author: angelos; state: Exp; lines: +1 -27 Didn't realize there was a sysdep_cleartext() for setting the BYPASS flags for socket security levels. Remove reduntant setsockopt() code. date: 2000/01/11 04:47:41; author: angelos; state: Exp; lines: +30 -4 Set IPSEC_LEVEL_BYPASS on all our sockets, so IKE packets don't accidentally get encrypted.
2000-01-26Merge with EOM 1.106Niklas Hallqvist
date: 2000/01/24 22:55:46; author: angelos; state: Exp; lines: +2 -2 Fix typo. date: 2000/01/24 16:48:42; author: ho; state: Exp; lines: +12 -2 Log when check_policy() returns failure. (bitten by keynote once too often... sigh) author: angelos Typo. author: angelos Passphrases are encoded as "passphrase:xxxx" now, to distinguish between passphrases and logic labels. author: angelos Oops on previous PFS-policy patch. Small fixes in the manpages. author: angelos Include files, in anticipation of the keynote.h changes.
2000-01-26Merge with EOM 1.60Niklas Hallqvist
author: niklas Add FreeBSD support author: angelos Manpage support in the Makefiles, mention in README.
2000-01-26Merge with EOM 1.12Niklas Hallqvist
date: 2000/01/25 06:13:15; author: angelos; state: Exp; lines: +7 -4 Handle IPV4_ADDR as a Phase 1 ID
2000-01-26regress/exchange/def-i.1: Sync with EOMNiklas Hallqvist
regress/exchange/def-r.1: Sync with EOM isakmpd.policy.5: Sync with EOM .cvsignore: Add isakmpd.policy.cat5
2000-01-26isakmpd.c: Merge with EOM 1.39Niklas Hallqvist
init.c: Merge with EOM 1.19 author: angelos GMTTimeOfDay and LocalTimeOfDay attributes, comment in x509.c.
2000-01-26Merge with EOM 1.137Niklas Hallqvist
author: ho Log a reason for dropping the message. author: niklas Some systems need to cast iov_base
2000-01-26Merge with EOM 1.5Niklas Hallqvist
date: 2000/01/26 14:03:07; author: niklas; state: Exp; lines: +1 -1 Comment RCSId correctly author: angelos Passphrases are encoded as "passphrase:xxxx" now, to distinguish between passphrases and logic labels.
2000-01-26Merge with EOM 1.113Niklas Hallqvist
author: ho Lower common log message from log_print to log_debug 'level'. author: niklas style & wording
2000-01-25add ethernet MAC filtering capabilityJason Wright
also includes split of bridgeintr() with some optimizations for quicker frame handling
2000-01-24Correct Xrs. marc@snafu.orgKjell Wooding
2000-01-24correct Xrs. marc@snafu.org.Kjell Wooding
2000-01-23Send an SA payload when we're deleting an ingress flow.Angelos D. Keromytis
2000-01-22remove extra externs not needed because of unistd.h (rest of tree will be ↵Theo de Raadt
done later.. contact me if you want to help)
2000-01-22Spell it "usable", not "useable", for consistency across the man pages.Aaron Campbell
2000-01-22ie. -> i.e.,Aaron Campbell
2000-01-21use net/mask notation for the private networksTheo de Raadt
2000-01-21ip4.allow -> ipip.allowAngelos D. Keromytis
2000-01-18Repair duplicate word occurences; (as found by a Perl script sent to us fromAaron Campbell
Tom Christiansen <tchrist@perl.com>).
2000-01-17insert giftunnel synopsis line, which would provide some clue how it's used ↵Michael Shalayeff
for post-gifconfig users; angelos@ ok
2000-01-17Document new ipx sysctl vars.Federico G. Schwindt
2000-01-15Add "giftunnel" keyword, obsoleting gifconfig(8).Angelos D. Keromytis
2000-01-15Order flags alphabetically.Angelos D. Keromytis
2000-01-15Update.Angelos D. Keromytis
2000-01-15add 'd' to usage. mention rc.shutdown in the man page.Eric Jackson
2000-01-14show blackhole flag; ura@hiru.aoba.yokohama.jpTheo de Raadt
2000-01-13Interim ingress flows when doing linked SAs.Angelos D. Keromytis
2000-01-13Establish ingress flows.Angelos D. Keromytis
2000-01-13Minor beautification.Angelos D. Keromytis
2000-01-13Add -ingress flagAngelos D. Keromytis
2000-01-11remove redundent printfPeter Galbavy
2000-01-10blocknonip flag -- use it on a per-interface basis to not accept fromAngelos D. Keromytis
and not forward to said interface traffic that's not IPv4/IPv6/ARP/ReverseARP
2000-01-10Big oops for non-IP SubjAltNames -- correct memcpy.Angelos D. Keromytis
2000-01-10Fix wrong type of variable.Angelos D. Keromytis
2000-01-10Rename variable for consistency.Angelos D. Keromytis
2000-01-10Some new sysctl variables.Angelos D. Keromytis
2000-01-10Document ip.ipsec-invalid-timeoutAngelos D. Keromytis
2000-01-10handle glob() return values better; netbsdTheo de Raadt
2000-01-10Xr gifconfigTheo de Raadt
2000-01-10Handle wildcard case better.Angelos D. Keromytis
2000-01-10Change format of IPsec flows (yet again).Angelos D. Keromytis
2000-01-10Fix printing SAs.Angelos D. Keromytis
2000-01-09Transport ports are in network order.Angelos D. Keromytis
2000-01-09Transport protocol ports are in network order.Angelos D. Keromytis
2000-01-09ipsec-acl entryAngelos D. Keromytis
2000-01-09Use getaddrinfo() in srcsa/dstsa/clearsa.Angelos D. Keromytis
2000-01-08support LBA-mapped extended partitions too; ↵Theo de Raadt
sigh@kuzirabekon.econ.nagasaki-u.ac.jp
2000-01-08Most of this is covered in securelevel(7) now.Hugh Graham
2000-01-07gre.allow and mobileip.allowAngelos D. Keromytis
2000-01-07sync with Greg Oster's NetBSD chages to Jan 4th 2000.Peter Galbavy