summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2001-08-23Make the wildcard address use SO_REUSEPORT, so multiple instances ofAngelos D. Keromytis
isakmpd can run on the same machine and reuse the wildcard address. This is intended mostly for debugging and testing purposes, so multiple listener issues are not relevant.
2001-08-23Reinitialize transports on SIGUP.Angelos D. Keromytis
2001-08-23Update (SPD entries are deleted when SPI is removed, and new addressesAngelos D. Keromytis
are identified on a SIGUP or INADDR_ANY packet).
2001-08-23Use ipsec_id_string as the section name for IKE mode config.Niklas Hallqvist
2001-08-23Correct ipsec_id_string buffer and length handling.Niklas Hallqvist
2001-08-23Compile on old systems, my version.Niklas Hallqvist
2001-08-23RSA-enabling is not necessary anymore.Niklas Hallqvist
2001-08-23ignore EEXIST for SPDADD on KAME; ok ho@Markus Friedl
2001-08-23sync w/ netbsdMarkus Friedl
2001-08-23recieve -> receiveAaron Campbell
2001-08-23o for a port_item, initialize the "next" pointer to NULLTodd C. Miller
o for an address, use calloc() instead of malloc() so the struct is zeroed Fixes a SEGV in pfctl due to uninitialized "next" pointers.
2001-08-23Support var="string". Expansion (at lex time) done using $var, for instance:Theo de Raadt
okproto="{ssh, smtp, domain, auth}" pass in on key0 proto tcp from any to any port $okproto keep state Can I ask someone else to document this in pf.conf(5)?
2001-08-23KNFTheo de Raadt
2001-08-23for -s all, do not error out when the first ioctl failsTheo de Raadt
2001-08-23fix usageTheo de Raadt
2001-08-23do not permit snaplen change on an active log fileTheo de Raadt
2001-08-22Revert last change.Hakan Olsson
2001-08-22Compile on older systems.Hakan Olsson
2001-08-22use ipsec_id_string() when generating rawkey file names.Hakan Olsson
2001-08-22ftp-proxyBob Beck
2001-08-22If we fail to get a key from DNSSEC, RAWKEY can still succeed.Hakan Olsson
2001-08-22Modify as per deraadt@'s wishes. aaron@ ok.Hakan Olsson
2001-08-22clarify tcpdump use; frantzenTheo de Raadt
2001-08-22Add an example.Hakan Olsson
2001-08-22Add a manual page.Hakan Olsson
2001-08-22DNS KEY RR values.Hakan Olsson
2001-08-22Cleanup and style fixes. Use getopt().Hakan Olsson
2001-08-22properly handle empty log fileTheo de Raadt
2001-08-22USER_FQDN ID support, untested.Hakan Olsson
2001-08-22IPCOMP policy control should be optional for backwardNiklas Hallqvist
compatibility.
2001-08-22Alphabeticize extern decls.Niklas Hallqvist
2001-08-22Add ipsec_id_string, a function for converting IDs to on epossibleNiklas Hallqvist
string form, to be used for IKE mode config and raw key selection by ID. Not yet used though.
2001-08-22Need an extra sa_release() when de-allocating exchange-associated SAs;Angelos D. Keromytis
thus, failed exchanges/negotiations don't leak SAs and transports. ok niklas@
2001-08-22Bypass IPCOMP too.Niklas Hallqvist
2001-08-21pflogd; work by canacar@eee.metu.edu.tr and myselfTheo de Raadt
2001-08-21Remove /usr/bin/mkfifo link -- mkfifo has lived in /sbin for severalTodd C. Miller
releases now.
2001-08-20Powered by @mantoya.Mike Pechkin
o) fix bogus .Xr usage; millert@ ok.
2001-08-19do not spin if no states are foundTheo de Raadt
2001-08-19Document per-rule byte counter.Daniel Hartmeier
2001-08-19Add per-rule byte counter, so mickey can do accounting. We're counting theDaniel Hartmeier
data part (without IP and TCP/UDP/ICMP headers), like the state counter does.
2001-08-19Document per-rule statistics. If the evaluation counters look funny,Daniel Hartmeier
think skip steps.
2001-08-19Prevent section leak in conf space.Angelos D. Keromytis
2001-08-19Print per-rule statistics when -v is used with -sr (show rules).Daniel Hartmeier
2001-08-19Unfuck some TCP state stuff that would drop the SYN|ACK.Mike Frantzen
Enumerated the TCP states. Here's a mapping new->old tcp states if anyone gives a shit: TCPS_CLOSED 0 TCPS_SYN_SENT 1 TCPS_ESTABLISHED 2 TCPS_CLOSING 3 TCPS_FIN_WAIT_2 4 TCPS_TIME_WAIT 5
2001-08-19Add parameter list support to parser. Handles lists for protocol, hostsDaniel Hartmeier
and ports in filter rules, like block in from { 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 } to any pass in proto tcp from any to any port { ssh, 1024 >< 2000, > 65000 } block in proto { udp, igmp } and does rule expansion (generate all needed rule combinations).
2001-08-19fix buffer underrun on 1.51Jun-ichiro itojun Hagino
2001-08-18make pfctl -s state SCREAM; frantzen is now happyTheo de Raadt
2001-08-18careful with snprintf() == -1; ho, provosTheo de Raadt
2001-08-18also handle snprintf() < 0Theo de Raadt
2001-08-18more careful with snprintf result codeTheo de Raadt
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-16 18:50:59 +0000