summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2005-07-09forgot to .Xr tcp(4)Hans-Joerg Hoexer
2005-07-09describe how to setup tcpmd5Hans-Joerg Hoexer
2005-07-09make sure, output of -ss is identical to syntax for SA rulesHans-Joerg Hoexer
2005-07-09it's ok to not specify the key when deleting a tcpmd5 SAHans-Joerg Hoexer
2005-07-09also bail out when pfkey returns ESRCH (eg. trying to delete a non-existing SA)Hans-Joerg Hoexer
2005-07-09small cleanupsHans-Joerg Hoexer
2005-07-09add support tcpmd5Hans-Joerg Hoexer
2005-07-09Provide infrastructure for adding/deleting SAs, will be used by tcpmd5 andHans-Joerg Hoexer
manual keying. Not used yet.
2005-07-09Clean out a few more unused/uninitialized variables.Kenneth R Westerback
ok millert@
2005-07-09Clean out a few more unused/uninitialized variables.Kenneth R Westerback
ok henning@
2005-07-09Since we never add more than the default dhcp_universe, expunge theKenneth R Westerback
code to handle mulitple 'vendor' universes. Don't bother with a specific error message about 'vendor'. An unsupported option is an unsupported option, and a '.' in an option name is a syntax error. ok henning@
2005-07-08More dead and moribund code removal/cleanup. This time unused parametersKenneth R Westerback
and associated code for store_options(). ok henning@
2005-07-08Eliminate unused code and associated parameters.Kenneth R Westerback
ok deraadt@
2005-07-07set flow type (use, require, etc.) when a rule is created. Up to now this wasHans-Joerg Hoexer
done while crafting the corresponding pfkey message.
2005-07-07Do not mix rule types with flow typesHans-Joerg Hoexer
2005-07-07add type for rules; will need this for tcpmd5Hans-Joerg Hoexer
2005-07-07add prototype for pfkey_parse()Hans-Joerg Hoexer
2005-07-07Eliminate unused code and associated parameter.Kenneth R Westerback
ok deraadt@ millert@.
2005-07-07Eliminate tree_cache structure in favour of option_data. EliminateKenneth R Westerback
redundant level of indirection in building and using option_data arrays while constructing outgoing packets. Make option_data len field unsigned. ok henning@. 'cool!' deraadt@.
2005-07-07Expunge two unused fields (buf_size, timeout) in tree_cache structure.Kenneth R Westerback
ok millert@ deraadt@ henning@
2005-07-07Expunge two unused fields (buf_size, timeout) in tree_cache structure.Kenneth R Westerback
ok millert@ deraadt@ henning@
2005-07-05fix commentHans-Joerg Hoexer
2005-07-05use correct function name in log message, tiny KNFHans-Joerg Hoexer
2005-07-04do not whack errno before using it; Andrey MatveevTheo de Raadt
2005-07-01Add -f option for disk operations. Idea by deraadt.Marco Peereboom
This is not fully functional yet.
2005-06-30in order for pfvar.h not to conflict with openssl's crypto.h, useNikolay Sturm
PF_MD5_DIGEST_LENGTH instead of including crypto/md5.h ok markus@, henning@, mpf@
2005-06-30grmpf, forgot to add -d to usage()...Hans-Joerg Hoexer
2005-06-30Document -dHans-Joerg Hoexer
2005-06-30add -d flag for flow deletion. Enable flow deletion.Hans-Joerg Hoexer
2005-06-30clarify: -F flushes both SPD and SADBHans-Joerg Hoexer
2005-06-30Next step, again no functional change yetHans-Joerg Hoexer
2005-06-30Prepare for flow deletion, no functional change yet.Hans-Joerg Hoexer
2005-06-29ignore (but still accept) -D and -LJared Yanovich
(and other minor cleaning while here: sync usage, whitespace, fix error messages) ok millert
2005-06-29sort optionsJared Yanovich
2005-06-27improve output for SAsHans-Joerg Hoexer
while around, do small whitesparce cleanup added a missing "static"
2005-06-27reference bpf(4); from alexey e. suslikov;Jason McIntyre
2005-06-27grammar;Jason McIntyre
2005-06-27- sort synopsis and options listJason McIntyre
- sync the args in the options list to those in synopsis, and avoid using structures such as `-l very long description of single arg'
2005-06-27document `noauto' option;Jason McIntyre
ok millert@
2005-06-26indentation/white space cleanup, no binary changeHans-Joerg Hoexer
2005-06-26There's a dependency on the compress API that changedOtto Moerbeek
2005-06-25/* Fallthrough. */ -> /* FALLTHROUGH */Hans-Joerg Hoexer
now that's useable with lint
2005-06-25typo in commentHans-Joerg Hoexer
2005-06-25Use correct local ID in phase 1 when using IPV[46]_ADDR.Hans-Joerg Hoexer
Diff from st.sch at gmx.net
2005-06-24err -> errxJolan Luff
2005-06-23iface description is not an array of ptr but rather just a string; jcs@ okMichael Shalayeff
2005-06-23- cleanup dead flagsJared Yanovich
- minor mdoc/rewording improvements - add some relevant crossrefs ok jmc
2005-06-16bye bye whiteoutsTodd C. Miller
2005-06-16whiteout bit I missed earlierTodd C. Miller
2005-06-14Kill whiteout support. OK deraadt@ and beck@Todd C. Miller