summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2005-10-27Do not touch LIST_* macro internals.Hans-Joerg Hoexer
with otto@, ok ho@
2005-10-26don't send DPD messages before the exchange is finialized, otherwiseMarkus Friedl
we have a race between DPD and exchange timeouts and both will release the SA and corrupt the SA list. ok hshoexer@, ho@
2005-10-26put the 100% right r1.79 back in, that is still as right as it was the firstHenning Brauer
time. dale just had the same problem and made me look again.
2005-10-25some small knf, ok ho@Hans-Joerg Hoexer
2005-10-25Do not send a message when no transport is available.Hans-Joerg Hoexer
ok cloder ho
2005-10-24delete more EFAULT stupidityTheo de Raadt
2005-10-23Add support for SENSOR_AMPS.Mark Kettenis
ok dlg@
2005-10-18add support for static interface group expansion, i. e.Henning Brauer
pass to group ok hshoexer, hacked at linux-kongress last week
2005-10-17parse correctly flows using ipcomp. Glitch noticed by jared rr spiegel.Hans-Joerg Hoexer
2005-10-16Prepare for better host specification parser: dns names, interfaces, etc. ButHans-Joerg Hoexer
for now, just ipv4. Derived from pfctl(8).
2005-10-16Unset debug flag.Hans-Joerg Hoexer
2005-10-16Add keyword "any" for addresses, reduces to "0.0.0.0/0".Hans-Joerg Hoexer
2005-10-16cleanup messages generated by err(3)Hans-Joerg Hoexer
2005-10-15Use queue macros instead of directly accessing fields. ok miod@ aaron@Otto Moerbeek
jaredy@ patrick@ millert@
2005-10-13unused parametersHenning Brauer
2005-10-13dead definesHenning Brauer
2005-10-10getifaddrs() slightly later in printif(), prevents possible memleakHenning Brauer
Andrey Matveev <evol@online.ptt.ru>
2005-10-07Don't display errno message when errno isn't set.Pedro Martelletto
Okay deraadt@, moritz@, help and okay henning@
2005-10-06improve examples and show how to use KEY_LENGTH. Slightly different fix thanHans-Joerg Hoexer
proposed by sthen at spacehopper dot org, fixes pr 4522, thanks! ok and with jmc@
2005-10-06Use part of the reserved space on the disk inode to scatter 16 more bitsPedro Martelletto
for the UID and GID, making them 32-bit. Based on what Linux does, with a slightly different implementation. Endianess issue in fsck noted by miod@, okay deraadt@.
2005-10-05Add multicast routing to GENERIC.Esben Norby
It is now possible to enable multicast routing in the kernel with the sysctl option net.inet.ip.mforwarding=1 Based on intial work by msf@ help claudio@ ok claudio@ deraadt@
2005-10-04wording from simon kuhnle (pr #4530);Jason McIntyre
2005-10-03print all trunk flagsReyk Floeter
ok brad@
2005-09-30deploy .An -nosplit; ok jmcJared Yanovich
2005-09-27add examples of explicitly bringing ethernet ifs up;Jason McIntyre
from stefek zaba; ok deraadt@
2005-09-27document aesctr and null encryption; ok jmc, hshoexerMarkus Friedl
2005-09-27missing returnMarkus Friedl
2005-09-23- beef up DESCRIPTIONJason McIntyre
- document that paths to key files may be relative or absolute - reference vpn(8) in SEE ALSO most of this diff came about from a mail from benjamin pineau who mailed hshoexer and myself about some possible improvements to this file; ok hshoexer@
2005-09-23Document new UI commandsHans-Joerg Hoexer
ok and help jmc@
2005-09-23Provide UI commands to delete phase 1 SAs.Hans-Joerg Hoexer
Looks good mortiz@
2005-09-23Remove some uncommented section headers from the template man page (RETURNHans-Joerg Hoexer
VALUES, BUGS, CAVEATS,...). While there, add HISTORY section.
2005-09-22use "force" keyword when adding to Phase 1 section, otherwise isakmpd willHans-Joerg Hoexer
write some annyoing warning to the logs...
2005-09-21put description of `dest_address' in the right place;Jason McIntyre
ok deraadt@
2005-09-20if we must un-export, only un-export when we do the first call forTheo de Raadt
each filesystem; ok drahn, specific issue found by otto
2005-09-20add an entry to "Phase 1" section for each remote peer.Hans-Joerg Hoexer
2005-09-20add a "Connection=..." entry for active connectionsHans-Joerg Hoexer
2005-09-19grammar;Jason McIntyre
from benjamin pineau; ok hshoexer@
2005-09-15Clean up compilation with -Wall, okay deraadt@Pedro Martelletto
From: Leonardo Chiquitto Filho <leonardo@iken.com.br>
2005-09-13Only DELEXPORT filesystems which are not exported. Removes NFS race whenDale Rahn
mounting filesystems on nfs servers. Improvements and ok otto@
2005-09-06document `what' from interactive mode: from ely petty;Jason McIntyre
kill an unneeded .Pp whilst here;
2005-09-01Comment fix and make description of -c and -w match reality moreOtto Moerbeek
closely. ok millert@ deraadt@
2005-08-30Get the start of the A6 partition from fdisk. Fixes wrong suggestion ofUwe Stuehler
offset 0 for the start of slice a. ok deraadt@
2005-08-27no need to display the copyright in the formatted page;Jason McIntyre
ok deraadt@
2005-08-27backout unapproved diffTheo de Raadt
2005-08-25when we get an invalid hostname in an option, bitching a moaning is ok,Henning Brauer
but there is no point in refusing the lease based on that. so bitch and moan and ignore that option but accept the lease. yes, customer networks are sometimes interesting... ok millert krw beck
2005-08-25read the information from the INADDR_ANY socket and do not loop ifMarkus Friedl
a new IP appears (cf udp.c, rev 1.74), ok ho@ hshoexer@ cloder@ deraadt@
2005-08-24document /etc/raid[0-3].conf in FILES;Jason McIntyre
from rohee@, but adjusted by me;
2005-08-23disable -B support for now; ok dlgTheo de Raadt
2005-08-23note that RSA_SIG should be part of the "Transforms" tag when settingJason McIntyre
up key- and cert-based authentication; problem found by andrew fresh; help/ok hshoexer@
2005-08-23`DSS' is unsupported, so remove references to it;Jason McIntyre
ok hshoexer@