summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2001-09-061:1 bidrectional NAT (binat); ok dhartmei@ and frantzen@jasoni
2001-09-06Initial idea from aaron@: Last char of .Xr group in SEE ALSO section shouldMike Pechkin
2001-09-06double word.Jan-Uwe Finck
2001-09-05make sure that va_start() has matching va_end()Theo de Raadt
2001-09-04Support parameter lists {} for interfaces in filter rules, likeDaniel Hartmeier
2001-09-03fix spellingsTheo de Raadt
2001-09-03Include su# in generated disktab. Because modern disks have a variableTodd C. Miller
2001-09-02Print rule numbers zero-based. Noted by primus@gblx.net.Daniel Hartmeier
2001-09-01Changes to build platform specific files properly with the powerpc -> macppcDale Rahn
2001-08-31(c)-2001Hakan Olsson
2001-08-30Mention which debug levels we currently use.Hakan Olsson
2001-08-29kill the -i option; it just causes all sorts of grief; canacar@eee.metu.edu.trTheo de Raadt
2001-08-28move '!' from host_list to host: "xhost : '!' host | host;"; ok dhartmei@Markus Friedl
2001-08-28check for malloc/strdup == NULLMarkus Friedl
2001-08-28Support ! operator in host parameter lists. Fixes PR system/2030. ReportedDaniel Hartmeier
2001-08-28Bump state timeouts and allow tweaking them from pfctl.Mike Frantzen
2001-08-27Compile on alpha.Hakan Olsson
2001-08-27doc improvements; canacar@eee.metu.edu.trTheo de Raadt
2001-08-27un-borkTheo de Raadt
2001-08-26minor cleanupsTheo de Raadt
2001-08-26sort keywordsTheo de Raadt
2001-08-26more styleNiklas Hallqvist
2001-08-25Enable IKE mode config, as it works ok with PGPnet and at least has a usableNiklas Hallqvist
2001-08-25Use x509_DN_string API. Style fixes.Niklas Hallqvist
2001-08-25Add x509_DN_string API to get a printable DN component given oneNiklas Hallqvist
2001-08-25StyleNiklas Hallqvist
2001-08-25PF ISN randomization. Or in trekkie techno-babble, ISN phase modulation.Mike Frantzen
2001-08-25Casting of lhs, is not what you think it is.Niklas Hallqvist
2001-08-24move back to requested snaplen after SIGHUP; canacar@eee.metu.edu.trTheo de Raadt
2001-08-24rearrange so that snaplen cannot be changed; canacar@eee.metu.edu.trTheo de Raadt
2001-08-24corrections; wouter.clarie@pandora.beTheo de Raadt
2001-08-24Send DELETE notifications for all active SAs when we shut down the daemon.Hakan Olsson
2001-08-24Initial IPCOMP support.Hakan Olsson
2001-08-24I was only going to remove #include "init.h", but found 8 moreHakan Olsson
2001-08-24typo in debug msgHakan Olsson
2001-08-23Make the wildcard address use SO_REUSEPORT, so multiple instances ofAngelos D. Keromytis
2001-08-23Reinitialize transports on SIGUP.Angelos D. Keromytis
2001-08-23Update (SPD entries are deleted when SPI is removed, and new addressesAngelos D. Keromytis
2001-08-23Use ipsec_id_string as the section name for IKE mode config.Niklas Hallqvist
2001-08-23Correct ipsec_id_string buffer and length handling.Niklas Hallqvist
2001-08-23Compile on old systems, my version.Niklas Hallqvist
2001-08-23RSA-enabling is not necessary anymore.Niklas Hallqvist
2001-08-23ignore EEXIST for SPDADD on KAME; ok ho@Markus Friedl
2001-08-23sync w/ netbsdMarkus Friedl
2001-08-23recieve -> receiveAaron Campbell
2001-08-23o for a port_item, initialize the "next" pointer to NULLTodd C. Miller
2001-08-23Support var="string". Expansion (at lex time) done using $var, for instance:Theo de Raadt
2001-08-23KNFTheo de Raadt
2001-08-23for -s all, do not error out when the first ioctl failsTheo de Raadt
2001-08-23fix usageTheo de Raadt