summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2006-11-24add support to tag ipsec traffic belonging to specific IKE-initiatedReyk Floeter
2006-11-24fix typo for remote port; from Brian CandlerMarkus Friedl
2006-11-22sync dhclient and dhcpd parse.c areas where we can.Kevin Steves
2006-11-22fix some warning messages and comments in parse_date(); ok henning@Kevin Steves
2006-11-21remove spurious ; after bracket, no binary changeKevin Steves
2006-11-21remove unused #defines, no binary change; ok henning@Kevin Steves
2006-11-21do not delete sections that might be shared with other connectionsMarkus Friedl
2006-11-21introduce sysctl net.inet6.ip6.multicast_mtudisc (for multicast routers).Jun-ichiro itojun Hagino
2006-11-21re-order includes and eliminate duplicates, no binary change; ok henning@Kevin Steves
2006-11-20-K argument to kill source tracking nodes explicitly, behaves like theRyan Thomas McBride
2006-11-20knf: sizeof x -> sizeof(x)Jun-ichiro itojun Hagino
2006-11-19Default snaplen has been 116 for a while now.Joel Knight
2006-11-19Try DIOCGPDINFO before DIOCGDINFO when trying to determine the 'label'Kenneth R Westerback
2006-11-17change semantics of ff01::/16 to interface local multicastJun-ichiro itojun Hagino
2006-11-16only look at routing table 0 (main one)Henning Brauer
2006-11-16make RFC2292/3542 selection automagically happen.Jun-ichiro itojun Hagino
2006-11-15remove KAME_SCOPEID #ifdef.Jun-ichiro itojun Hagino
2006-11-14memory requirements are relevant only for mount_mfs; ok jmc@Otto Moerbeek
2006-11-13briefly describe phases 1 and 2, and use these terms moreJason McIntyre
2006-11-13previous was not quite right;Jason McIntyre
2006-11-13fix a macro mistake;Jason McIntyre
2006-11-13Handle rules with addresses from mismatched address families correctly.Ryan Thomas McBride
2006-11-11Fix memory leak, from Charles Longeau, many okaysPedro Martelletto
2006-11-11EXAMPLES was getting too lengthy, so trim some of the ones that wereJason McIntyre
2006-11-10landisk has no kbd(8)Theo de Raadt
2006-11-10Add -nwid command to allow wireless interfaces to not prefer a specificMichael Knudsen
2006-11-10enable -g againAlexander von Gernler
2006-11-10check both rule sourace and destination when grouping sa'sMathieu Sauve-Frankel
2006-11-10When using -vv, also show grouped SAs.Hans-Joerg Hoexer
2006-11-10Fix grouping for SAs. Now all combinations of SAs are possible,Hans-Joerg Hoexer
2006-11-10Do not count sa, ike and tcpmd5 rules twice. Fixes PR 5263.Hans-Joerg Hoexer
2006-11-10Print the interface that each queue is bound to in the pfctl -sq outputJoel Knight
2006-11-09trim SEE ALSO: there is no need to list every pseudo-deviceJason McIntyre
2006-11-09desireable -> desirable;Jason McIntyre
2006-11-09support public keys w/o SubjectPublicKeyInfo (format: BEGIN RSA PUBLIC KEY)Markus Friedl
2006-11-09oopsTheo de Raadt
2006-11-08sh machines also have a /usr/mdec/mbrTheo de Raadt
2006-11-08add a -y flag, for non-interactive useTheo de Raadt
2006-11-07Only try to recursively print rules if they are actually anchors.Ryan Thomas McBride
2006-11-07Unbreak authpf by handling non-inline anchors separately from the { } anchorsRyan Thomas McBride
2006-11-05Don't open a transaction for a ruleset unless it's a brace ruleset thatRyan Thomas McBride
2006-11-03storing return value of strtol() in int variable was not safe,Alexander von Gernler
2006-11-03correctify example;Jason McIntyre
2006-11-02Check for newline before truncating.Ray Lai
2006-11-02Error out on empty string passed as device name.Ray Lai
2006-11-01sync usage(); ok mcbrideJason McIntyre
2006-11-01tweaks;Jason McIntyre
2006-11-01Don't recures ALL the time.Ryan Thomas McBride
2006-11-01KNF unrelated to previous commit.Ryan Thomas McBride
2006-11-01Add support for aggressive mode (from the k2k6 IPsec hackathon).Ryan Thomas McBride