summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2006-06-01Revert last commit. Modifing a interface does a remove and then an add.Claudio Jeker
2006-06-01document port matching in flows; ok hshoexer@Christian Weisgerber
2006-06-01'-alias' is deprecated. Use 'delete' in ifconfig statements.Kenneth R Westerback
2006-06-01ifconfig should be either deleting an interface address, or adding one in oneBob Beck
2006-06-01change the local-ID section name to always be unique as we may want to use mo...Mathieu Sauve-Frankel
2006-06-01Support flows with port modifiers for proto tcp/udp, e.g.Christian Weisgerber
2006-06-01delintDavid Hill
2006-06-01more to free, needed for SA grouping.Hans-Joerg Hoexer
2006-06-01Don't treat the addition of a dhclient.conf 'alias{}' address as anKenneth R Westerback
2006-06-01convert pfkey to ipsec_rule and use ipsecctl_print_rule() when dumpingMarkus Friedl
2006-06-01Add members dst2, proto2 and spi2 to struct ipsec_rule and defineHans-Joerg Hoexer
2006-06-01Prepare for SA grouping.Hans-Joerg Hoexer
2006-06-01print actual key size when warning about the wrong key size; ok hshoexerMarkus Friedl
2006-06-01read the full reply from PFKEY even if sadb_errno is set; ok hshoexerMarkus Friedl
2006-06-01spacingTheo de Raadt
2006-06-01knfHans-Joerg Hoexer
2006-06-01correct error messages to match calloc where appropriateTodd T. Fries
2006-06-01permit feeding isakmpd.fifo IPv6 addressesTodd T. Fries
2006-06-01knfHans-Joerg Hoexer
2006-06-01add more v6 support, this round `any' expands additionally to ::/0Todd T. Fries
2006-06-01rename list link for ipsec_rule structures from "entries" to "rule_entry".Hans-Joerg Hoexer
2006-06-01When no peer is specified, make this rule a "catch-all" rule for any remoteHans-Joerg Hoexer
2006-06-01Generate correct configuration for default peers.Hans-Joerg Hoexer
2006-06-01Fix a commentHans-Joerg Hoexer
2006-05-31Replace atoi with strtonum.David Hill
2006-05-31white spacesHans-Joerg Hoexer
2006-05-31clarify link-timeout default as seconds; ok jmc@Kevin Steves
2006-05-31add basicTodd T. Fries
2006-05-31add a little markup;Jason McIntyre
2006-05-31whitespace cleanupHans-Joerg Hoexer
2006-05-31shuffle some newlines to make all the formatting work againMathieu Sauve-Frankel
2006-05-31tiny KNFHans-Joerg Hoexer
2006-05-31Make sure, that phase 1 SAs of active connections stay alive. Fixes a DPDHans-Joerg Hoexer
2006-05-31Small function header knf.Hans-Joerg Hoexer
2006-05-31Prepare for handling unnamed remote peers.Hans-Joerg Hoexer
2006-05-31Fix 'special value 0 requests that dhclient not wait for a link stateKevin Steves
2006-05-30implement monitor mode for ipsecctl. worked on with markus@Mathieu Sauve-Frankel
2006-05-30Don't double-eject tapes. Once is enough. Closes PR#1282.Kenneth R Westerback
2006-05-30fix SA grouping. Now, esp+ah and ah+esp works again.Hans-Joerg Hoexer
2006-05-30this fixes a crash observed by Naddy on amd64, and permits the src/dst ip's toTodd T. Fries
2006-05-29enable lists.Hans-Joerg Hoexer
2006-05-29Need protoype for ipsecctl_free_rule(). While around clean upHans-Joerg Hoexer
2006-05-29Provide functions for copying members of rules. Implement copyrule()Hans-Joerg Hoexer
2006-05-29add ipsecctl_free_rule() for cleaning up rules.Hans-Joerg Hoexer
2006-05-29revert vfs.nfs.privport sysctl, broke a few architecturesAnil Madhavapeddy
2006-05-29unify code a little bit (consistent variable names).Hans-Joerg Hoexer
2006-05-29Also return proper list of addresses for interface groups.Hans-Joerg Hoexer
2006-05-29As the rule expansion is now aware of host lists, host_if() has toHans-Joerg Hoexer
2006-05-29teach expand_rule() to iterate over host lists, not used yet.Hans-Joerg Hoexer
2006-05-29fix rule numbering (for -vv)Hans-Joerg Hoexer