summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2006-10-11Allow the 'quick' keyword on an anchor. IFF there is a matching rule insideRyan Thomas McBride
2006-10-10fgets(3) returns NULL on error, not 0. No functional change, but it makesChad Loder
2006-10-06Print 'flags any' correctly and handle anchors.Ryan Thomas McBride
2006-10-06'no state' should only be printed on pass rules, though.Ryan Thomas McBride
2006-10-06Print out 'no state' when the rule is not stateful.Ryan Thomas McBride
2006-10-06Oops, flags S/SA doesn't work on fragments.Ryan Thomas McBride
2006-10-06Make 'flags S/SA keep state' the implicit for filter rules, based onRyan Thomas McBride
2006-10-05Reword sentence to fix grammar nit.Tom Cosgrove
2006-10-04sort the smartoffline subcommands;Jason McIntyre
2006-10-04DIAGNOSTICS -> CAVEATS because:Jason McIntyre
2006-10-03move the advice about smart, readattr, and sec* to before the commandJason McIntyre
2006-10-03provide a summary of the available commands, since there's a ton ofJason McIntyre
2006-10-03put the command list into some semblance of order;Jason McIntyre
2006-10-02various tweaks to smarten this page up a bit;Jason McIntyre
2006-10-02standard EXAMPLES;Jason McIntyre
2006-10-02simplify SYNOPSIS and sync usage();Jason McIntyre
2006-09-30Don't use uninitialized variable.Ray Lai
2006-09-30Clear errno before calling the strtol functions.Ray Lai
2006-09-29add a new section header, since DESCRIPTION is getting so large...Jason McIntyre
2006-09-29make it clearer what needs to be run, and how; push manual keying downJason McIntyre
2006-09-27Oops. Missed a line. Fix so disklabel(8) compiles again.Kenneth R Westerback
2006-09-26Zap D_REMOVABLE flag from disklabel. If you didn't already know thatKenneth R Westerback
2006-09-26a better description of what our automatic keying example is up to;Jason McIntyre
2006-09-24Eliminate D_CHAIN, D_ECC and D_RAMDISK flags from disklabel. They wereKenneth R Westerback
2006-09-24No point in checking for a NULL ifi after we've used it. Plus ifi isKenneth R Westerback
2006-09-22Remove lfs_cleanerd and mount_lfsPedro Martelletto
2006-09-22- document which parts need to be packet filtered, and whyJason McIntyre
2006-09-22typo in err(); from bret.lambert@gmail.com, thanks!Hans-Joerg Hoexer
2006-09-21Those were supposed to go away...Pedro Martelletto
2006-09-21Remove newlfs, okay weingart@ deraadt@Pedro Martelletto
2006-09-20remove references to bad144(8) man page;Jason McIntyre
2006-09-20-.Xr dumplfs 8 ,Jason McIntyre
2006-09-20Remove dumplfs, okay millert@ miod@Pedro Martelletto
2006-09-19sort SAs by spi; ok hshoexerMarkus Friedl
2006-09-19Use S_IS* macros insted of masking with S_IF* flags. The latter mayOtto Moerbeek
2006-09-18KNF and clean some trailing white spaces, no binary change.Hans-Joerg Hoexer
2006-09-17correct mode for open().Marc Balmer
2006-09-15reorganise the sections to make more sense;Jason McIntyre
2006-09-15clarification;Jason McIntyre
2006-09-15add in filtering rules to allow keying daemons to talk;Jason McIntyre
2006-09-15Remove "Delete-SAs" config option. This was needed for interactionHans-Joerg Hoexer
2006-09-14simplify an example. ok jmc@Hans-Joerg Hoexer
2006-09-13use "proto ipencap" for the gateway filter rules;Jason McIntyre
2006-09-12note that enc traffic is unecrypted; from mpfJason McIntyre
2006-09-12no need to Xr isakmpd.conf.5;Jason McIntyre
2006-09-12add a section on packet filtering ipsec traffic;Jason McIntyre
2006-09-11improvememnts for `local', `peer', and `psk'; ok hshoexerJason McIntyre
2006-09-11- document how to set ipsec stuff running at bootJason McIntyre
2006-09-11- sort optionsJason McIntyre
2006-09-09point people towards ipsec.conf.5; after some discussion w/ reykJason McIntyre