summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2005-07-26Fix buffer overflows in dhcpd and dhclient. Closes PR#4306.Kenneth R Westerback
ok henning@
2005-07-25Use payload NAT-D or NAT-D-DRAFT according to NAT-T vendor ID advertised by theHans-Joerg Hoexer
peer. looks good ho
2005-07-25output some more information on UI command "S"Hans-Joerg Hoexer
ok ho@
2005-07-24use correct function names in error messagesHans-Joerg Hoexer
2005-07-24prepare for combining SAs and flows in one single rule, no functional changeHans-Joerg Hoexer
yet.
2005-07-23Our dhclient.conf lives in /usr/src/etc.Kenneth R Westerback
ok henning@
2005-07-23document automatic generation of reverse SA rules.Hans-Joerg Hoexer
2005-07-23add automatic creation of reverse SAs.Hans-Joerg Hoexer
A tcpmd5 rule like: tcpmd5 from 192.168.3.28 to 192.168.3.14 spi 0x2000:0x2001 \ key 0xbeefdead:0xdeadbeef expands now to: tcpmd5 from 192.168.3.28 to 192.168.3.14 spi 0x00002000 key 0xbeefdead tcpmd5 from 192.168.3.14 to 192.168.3.28 spi 0x00002001 key 0xdeadbeef
2005-07-23prepare for specifying both in and out key, not used yet.Hans-Joerg Hoexer
2005-07-23prepare for specifying incoming and outgoing SPIs, not used yet.Hans-Joerg Hoexer
2005-07-22spacing and tiny knfHans-Joerg Hoexer
2005-07-21remove trailing newlines from err(3) calls; millert@ and matthieu@ ok.Federico G. Schwindt
2005-07-20Print the last two kern.nchstats entries.Miod Vallat
2005-07-20revert one TAILQ_FOREACH conversion from r1.112 which wasMoritz Jodeit
wrong and broke some isakmpd setups. ok hshoexer@
2005-07-18revert marcos bio changes, mickey not okDavid Gwynne
2005-07-18tweaks;Jason McIntyre
ok marco@
2005-07-18Fix online help.Marco Peereboom
2005-07-18Reflect new reality.Marco Peereboom
2005-07-18Kill initial implementation because it sucked. It was far too complex the newMarco Peereboom
paradigm is to virtualize the operations. Using physical data is really only necessary on low end hardware or by advanced users. For now only support the inquiry operation. ok dlg@
2005-07-17No longer used.Kenneth R Westerback
2005-07-17Insist on correct hardware addresses in dhclient.conf andKenneth R Westerback
dhclient.leases.<if> files. Simplify parse_numeric_aggregate() as a result, rendering tree.c and tree.h redundant. ok millert@
2005-07-16No longer used.Kenneth R Westerback
2005-07-16Rejig struct string_list to use char array rather than char pointer, andKenneth R Westerback
eliminate new_parse_string. alloc.c becomes redundant. Junk a couple of unused fields (env, envc) in struct client_state. suggestions by & ok millert@
2005-07-16fix printing of hostname, from brooks davis via jmcHenning Brauer
2005-07-16back out last; breaks in cases where we want hex and the last byte is 0Henning Brauer
2005-07-16NULL is not a time_t. From brooks at freebsd.Kenneth R Westerback
2005-07-16Eliminate unnecessary 'code' field from struct option. MakeKenneth R Westerback
dhcp_options const. ok henning@
2005-07-15Fix handling of comma separated option value lists, broken in r1.20.Kenneth R Westerback
Found and fix tested by Moritz Jodeit.
2005-07-15let pretty_print_option() handle trailing nul bytes correctly (i. e. don'tHenning Brauer
let a trailing nul byte force hex printing) FreeBSD PR 83468 by Sean Winn <sean@gothic.net.au>, via jmc@
2005-07-14fix some memleaks. ok hshoexer@Moritz Jodeit
2005-07-13spacingTheo de Raadt
2005-07-13minor knfTheo de Raadt
2005-07-13Repair/rationalize option handling to ensure valid option section isKenneth R Westerback
always sent. Fold store_options into cons_options. Eliminate priority list of options. ok deraadt@
2005-07-11krw stopped use of hash.cTheo de Raadt
2005-07-11spacingTheo de Raadt
2005-07-11Expunge unused hashing code and variables.Kenneth R Westerback
2005-07-11Dispense with the overhead of creating a hash just to lookup theKenneth R Westerback
option name. Just iterate over the 256 option names. Only the first 80 or so are used anyway. Eliminating now unused hash code will follow. ok henning@ millert@ beck@
2005-07-11clear PFI_IFLAG_SKIP when clearing interface flags, found by David Hill,Daniel Hartmeier
ok henning@
2005-07-10allow reading key from a fileHans-Joerg Hoexer
2005-07-10tweaks;Jason McIntyre
ok hshoexer@
2005-07-10tweaks;Jason McIntyre
2005-07-09Mention tcpmd5, .Xr ipsec(4) and tcp(4).Hans-Joerg Hoexer
2005-07-09forgot to .Xr tcp(4)Hans-Joerg Hoexer
2005-07-09describe how to setup tcpmd5Hans-Joerg Hoexer
2005-07-09make sure, output of -ss is identical to syntax for SA rulesHans-Joerg Hoexer
2005-07-09it's ok to not specify the key when deleting a tcpmd5 SAHans-Joerg Hoexer
2005-07-09also bail out when pfkey returns ESRCH (eg. trying to delete a non-existing SA)Hans-Joerg Hoexer
2005-07-09small cleanupsHans-Joerg Hoexer
2005-07-09add support tcpmd5Hans-Joerg Hoexer
2005-07-09Provide infrastructure for adding/deleting SAs, will be used by tcpmd5 andHans-Joerg Hoexer
manual keying. Not used yet.