Age | Commit message (Collapse) | Author | |
---|---|---|---|
2006-03-21 | Correctly check for the end of the cmds table. There is no need to check for | Claudio Jeker | |
c_func2. Until now ifconfig accepted something like ifconfig tun0 1.2.3.4 1.2.3.5 foobar without error. Additionally change the error message to a more comprehensible message. OK markus@, henning@ | |||
2006-03-21 | instead of sizeof(array) / sizeof(element) computation, use the existing | Daniel Hartmeier | |
end-of-array NULL marker, shuts up source analysis tool, from deraadt@ | |||
2006-03-20 | NetBSD Coverity CID 2298: Fix memory leak. | David Hill | |
NetBSD Coverity CID 2299: Fix memory leak. NetBSD Coverity CID 2301: Fix memory leak. ok ray@ | |||
2006-03-20 | Don't increment a pointer *before* testing it for NULL | David Hill | |
ok deraadt@ | |||
2006-03-20 | NetBSD Coverity CID 2302: Free fat if fatal error to avoid leak. | David Hill | |
ok otto@ deraadt@ | |||
2006-03-20 | NetBSD Coverity CID 774: Don't increment a pointer *before* testing it for NULL! | David Hill | |
ok otto@ | |||
2006-03-20 | NetBSD Coverity CID 2074: Fix memory leak. | David Hill | |
ok deraadt@ | |||
2006-03-20 | NetBSD Coverity CID 1745: Fix memory leak. | David Hill | |
yes otto@ | |||
2006-03-20 | NetBSD Coverity CID 2305: Fix memory leak. | David Hill | |
ok deraadt@ | |||
2006-03-20 | When being verbose while deleting ike rules (-dv), print deletions instead of | Hans-Joerg Hoexer | |
additions. Suggested by david@ | |||
2006-03-20 | When adding a connection, do not explicitly start that connection | Hans-Joerg Hoexer | |
using "t" and "c" fifo commands. This is prone to a race when adding several tunnels between the same peers. Just let isakmpd start that connection on its own (using the connection checker). | |||
2006-03-20 | make sure the command fifo is ready before isakmpd returns. This | Hans-Joerg Hoexer | |
resolves a startup race when interacting with ipsecctl. Suggested by and discussed with moritz@ ok moritz@ | |||
2006-03-19 | Fix mem leaks in error path. From NetBSD's coverity analysis. ok pat@ | Otto Moerbeek | |
deraadt@ | |||
2006-03-17 | Off-by-one; from NetBSD's coverity analysis; ok millert@ | Otto Moerbeek | |
2006-03-16 | typo. | Alexandre Anriot | |
ok otto@ | |||
2006-03-14 | implement a Unicast Reverse Path Forwarding (uRPF) check for pf(4) | Damien Miller | |
which optionally verifies that a packet is received on the interface that holds the route back to the packet's source address. This makes it an automatic ingress filter, but only when routing is fully symmetric. bugfix feedback claudio@; ok claudio@ and dhartmei@ | |||
2006-03-13 | Cleanup and plug a fe memleaks and; from Davif Hill with a twist from | Otto Moerbeek | |
myself. | |||
2006-03-12 | Add the -s flag, meaning: skip mount if the file system is | Otto Moerbeek | |
already mounted. This flag is very handy when mounting mfs partitions. The -s flag will be used in an upcoming etc/rc diff. ok henning@ deraadt@ | |||
2006-03-12 | use asprintf instead of a static buffer; dhill, tested by pedro | Theo de Raadt | |
2006-03-09 | Remove -n from synopsis too | Pedro Martelletto | |
2006-03-09 | Remove option -n from newfs as well as all references to fs_postbl() | Pedro Martelletto | |
Various testing for a while, okay krw@ | |||
2006-03-07 | add support for special "bypass" and "deny" flows. | Reyk Floeter | |
ok hshoexer@, thanks jmc@ | |||
2006-03-07 | add an ike option for road warrior setups (hosts with dynamic ip | Reyk Floeter | |
addresses). "ike dynamic esp" will use the system's hostname as the fqdn source id (instead of the ip address) by default and enable dpd (dead peer detection) to allow smooth reconnects after an ip address change (i.e. forced reconnect with consumer adsl lines). ok hshoexer@, looks fine markus@, jmc@ | |||
2006-03-06 | convert permanent privilege revocation to use setresuid/setresgid; | Damien Miller | |
ok henning@ | |||
2006-02-21 | improvements from claudio: | Jason McIntyre | |
- note that "-alias" is a synonym for "delete", and encourage the latter - make the description of "delete" clearer ok claudio | |||
2006-02-21 | The new default encryption algorithm for main mode is AES instead of 3DES. | Hans-Joerg Hoexer | |
Noticed as not being documented by otto@. ok otto@ | |||
2006-02-20 | bit more consistent... | Jason McIntyre | |
2006-02-20 | - note that "deletetunnel" is for gif(4) and gre(4) devices only | Jason McIntyre | |
- remove some redundant text from "deletetunnel" description help/ok claudio | |||
2006-02-14 | Define a wsdisplay type for the Sun ZX/Leo frame buffer. | Miod Vallat | |
2006-02-06 | typo from alexey dobriyan; | Jason McIntyre | |
2006-02-03 | override authentication tag as well; ok hshoexer@ | Christian Weisgerber | |
2006-02-02 | Two fixes: generate default main mode config when using PSK, added missing | Hans-Joerg Hoexer | |
force (with naddy@) ok reyk@ naddy@ | |||
2006-02-02 | Small cleanup to avoid gotos, from Andrey Matveev. | Hans-Joerg Hoexer | |
ok moritz@ | |||
2006-02-01 | double semicolon; from Daniel Matic in PR 4929 | Otto Moerbeek | |
2006-02-01 | noted by lint: include <string.h> instead of <strings.h>, add tow ARGSUSED1 | Hans-Joerg Hoexer | |
2006-02-01 | NTP is described by RFC 1305, not 1035; | Jason McIntyre | |
from michal f. hanula (freebsd docs/92629) | |||
2006-01-28 | zap unused function | Henning Brauer | |
From: Andrey Matveev <evol@online.ptt.ru> | |||
2006-01-25 | spell fall through as FALLTHROUGH | Ted Unangst | |
2006-01-20 | initialize authtype->string in case of RSA to avoid bad free() | Christian Weisgerber | |
ok reyk@ hshoexer@ | |||
2006-01-17 | wrap long lines (no binary change) | Reyk Floeter | |
2006-01-17 | spacing | Theo de Raadt | |
2006-01-17 | no , after last element in enum | Theo de Raadt | |
2006-01-16 | add support for pre-shared keys with "ike esp" using the new keyword | Reyk Floeter | |
"psk". rsa-sig is recommended and will still be used by default. ok hshoexer@, manpage ok jmc@ | |||
2006-01-15 | If the log file is invalid/incompatible, try to rename the bad log file | Can Erkin Acar | |
and continue with a new name instead of suspending. ok mcbride@ | |||
2006-01-14 | Add a -q flag to reduce output a la newfs, and print the raw device we are | Miod Vallat | |
operating on instead of ``growfs'' (a la newfs as well). ok millert@ pedro@ | |||
2006-01-09 | some minor types house cleaning, ok otto | Theo de Raadt | |
2006-01-09 | Introduce a wsdisplay type for mac68k frame buffers; we might need to become | Miod Vallat | |
less generic in the future, though. | |||
2006-01-09 | Remove references to an/awi/ancontrol that should not have been | Jonathan Gray | |
here in the first place. | |||
2006-01-09 | Don't enter ancontrol. Reminded by deraadt@ | Jonathan Gray | |
2006-01-09 | Move ancontrol to the attic, no longer needed. | Jonathan Gray | |