| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2001-07-04 | Better IPv6/IPv4 integration | Niklas Hallqvist | |
| 2001-07-04 | IPv6 | Niklas Hallqvist | |
| 2001-07-04 | link to portal.conf.5; dead karls@inet.no | Theo de Raadt | |
| 2001-07-03 | Fix policy information for IPv6 subnet/range cases. This is ugly, I'll | Angelos D. Keromytis | |
| have to find another way of dealing with IPv6 addresses. | |||
| 2001-07-03 | sync set_spi with netbsd (fixes typo). | Markus Friedl | |
| 2001-07-03 | Put missing \n's in som error messages; consolidate redundant "if" (OK theo@). | Ian Darwin | |
| 2001-07-03 | strlcpy->strncpy for now | Markus Friedl | |
| 2001-07-03 | Missed a few style fixes... | Hakan Olsson | |
| 2001-07-03 | Document -q option. Some style fixes. dhartmei@ ok. | Hakan Olsson | |
| 2001-07-03 | Add a -q (quiet) option. dhartmei@ ok. | Hakan Olsson | |
| 2001-07-03 | Wait with strlcpy a while, change to strncpy. | Hakan Olsson | |
| 2001-07-03 | use strlcpy instead of memcpy to copy strings | Hakan Olsson | |
| 2001-07-03 | Slightly more verbose error messages. | Hakan Olsson | |
| 2001-07-02 | No, do NOT build them on everything | Theo de Raadt | |
| 2001-07-02 | Typo. | Hakan Olsson | |
| 2001-07-02 | #include <string.h> to get mem* prototypes. | Todd C. Miller | |
| 2001-07-02 | make the alpha happy | Theo de Raadt | |
| 2001-07-01 | tag packets generated by pf (return-rst, return-icmp) so they are not ↵ | Daniel Hartmeier | |
| filtered, use existing icmp_error() and ip_output(). ok dugsong@, frantzen@ | |||
| 2001-07-01 | Appeared in 3.0, not 2.9; openbsd@davidkrause.com | Angelos D. Keromytis | |
| 2001-07-01 | Remove warnings from non-DDEBUG case; angelos told me. | Niklas Hallqvist | |
| 2001-07-01 | ISAKMP configuration, a.k.a IKECFG or "mode-config", protocol implementation. | Niklas Hallqvist | |
| Disabled, has no configuration mechanism yet. This will be used for roaming users, who are going to get parameters like IP-address and nameserver from its peer, very much like DHCP, but securily inside an ISAKMP connection and still in time before negotiation of IPsec connections. You may see stylistic fixes in this commit too. Add some not yet used Makefile magic to deal with DNSSEC- enabled OpenSSL too. The IKECFG code work was sponsered by Gatespace Inc. Thank you! Configuration will come very soon, btw. | |||
| 2001-07-01 | strtol strictness. Style. Do not use dst end on an unconnected socket. | Niklas Hallqvist | |
| This should fix the IPv6 work for this round, There has been code by ho@ too in most my recent commits, we did this on Boston Logan airport, on our way home from !c2k1, the OpenBSD hackathon. | |||
| 2001-07-01 | More Style police, but also sane checking of address | Niklas Hallqvist | |
| family vs stated ID-type. | |||
| 2001-07-01 | strict strtol checking. text2sockaddr/sockaddr2text implementations | Niklas Hallqvist | |
| for systems without get{addr,name}info calls. Some style police. | |||
| 2001-07-01 | Style | Niklas Hallqvist | |
| 2001-07-01 | Style police | Niklas Hallqvist | |
| 2001-07-01 | Regression test for isakmpd utility functions, initially just text2sockaddr. | Niklas Hallqvist | |
| 2001-07-01 | Start support for IPv6 addresses in policy. | Angelos D. Keromytis | |
| 2001-07-01 | Set size correctly for IPv6 Phase 1 IDs. | Angelos D. Keromytis | |
| 2001-07-01 | Debug information for IDs. | Angelos D. Keromytis | |
| 2001-07-01 | Return the right length for address IDs. | Angelos D. Keromytis | |
| 2001-07-01 | Add port ranges to the rdr directive. Connections can be redirected | Kjell Wooding | |
| to either a range of the same size, or a single port. Redirects between ranges of different sizes are not supported. Eg: rdr dc0 10.0.0.0/24 port 60000:61000 -> 127.0.0.1 port 65530:* proto udp rdr xl0 0.0.0.0/0 port 6660:6669 -> 127.0.0.1 port 6667 proto tcp This replaces the wildcard port patch (when port = 0), as it should no longer be necessary. ok dhartmei@ | |||
| 2001-07-01 | Always print filter statistics, even when the filter is disabled. | Kjell Wooding | |
| 2001-07-01 | Finish with posixifying command options. Now both "pfctl -Fs" and | Kjell Wooding | |
| "pfctl -F states" work. Changed -[Fs]S to -[Fs] info (or -[Fs]i) based on an earlier conversation with theo. Added -[Fs] "all" to show or flush everything Fixup some man page pastos in the process | |||
| 2001-07-01 | Get the 'default:' case right too. | Hakan Olsson | |
| 2001-07-01 | Teach ipsec_decode_ids about IPv6. More error checking, some better log msgs. | Hakan Olsson | |
| 2001-07-01 | Eliminate IPv4 dependency. | Angelos D. Keromytis | |
| 2001-07-01 | Remove inaccurate "Assumes IPv4" comments. | Angelos D. Keromytis | |
| 2001-07-01 | Pass the right arguments to getnameinfo() | Angelos D. Keromytis | |
| 2001-07-01 | Fix remote_negotiation_address attribute; fix sockaddr2text() return | Angelos D. Keromytis | |
| value when zero-filling; log_error()->log_print() consistently. | |||
| 2001-07-01 | Don't try to delete unestablished SPIs. | Angelos D. Keromytis | |
| 2001-06-30 | make it more sysctl-like, ommit -kmd switches. | Michael Shalayeff | |
| no backwards compatibility keeped. add ability to change screens from cmd line. | |||
| 2001-06-29 | Fix address byte ordering issue, ho@ ok | Angelos D. Keromytis | |
| 2001-06-29 | Removing a debugging printout... | Hakan Olsson | |
| 2001-06-29 | KAME-integrated BSDs have getnameinfo | Jun-ichiro itojun Hagino | |
| 2001-06-29 | Reflect setsockopt changes. May need further mods for KAME IPsecs. | Hakan Olsson | |
| 2001-06-29 | setsockopt flags needs to be IPv6 aware | Hakan Olsson | |
| 2001-06-29 | POSIX-ify the flag options at theo's request | Kjell Wooding | |
| 2001-06-29 | change load_file implementation so we can accept input on | Kjell Wooding | |
| stdin. Rewrite NAT processing loop to accomodate this fact (we can only read the rules file once). ok theo | |||
| 2001-06-29 | Set the port *before* the comparison. | Angelos D. Keromytis | |
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |