summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2004-08-30Avoid spinning if the server gives us a bogus zero lease time, byOtto Moerbeek
enforcing a minimum lease time of 60s. ok deraadt@ henning@
2004-08-26sync usage for -aJared Yanovich
reminded by jmc, ok deraadt
2004-08-26update w.r.t. recursive anchorsJared Yanovich
includes: - simplify -a syntax - change an anchor example to mention authpf, which is more useful - document "pfctl -a anchor -vsA" for showing anchors recursively ok dhartmei jmc henning
2004-08-25add -E to usage(); from weissmanndudeMichael Shalayeff
2004-08-24revert r1.16, dhclient has to work without a config file at least on theHenning Brauer
install media, theo ok
2004-08-24spelling corrections; ok jmc@David Krause
2004-08-23We need to set sa->initiator before checking if the newly created SAHakan Olsson
replaces an old one, or the id_i/id_r check will mismatch. Previous behaviour was mostly harmless, but wasted some resources (until normal SA expiration). hshoexer@ "haven't tried, but think it's ok"
2004-08-23Default enable DPD (Dead Peer Detection) support. hshoexer@ okHakan Olsson
2004-08-23Indent nit.Hakan Olsson
2004-08-22mention where more can be learned about ifgroupsJared Yanovich
prodded by jmc, idea from Michael Knudsen
2004-08-20check for the tid arg; from netbsdMichael Shalayeff
2004-08-20Unbreak processing of options when given a command line with multipleOtto Moerbeek
-o options. All of them are relevant, not only the last one. ok miod@ claudio@ marius@
2004-08-19- sort options and sync usage()Jason McIntyre
- a few other tweaks ok mickey@
2004-08-19document -QZ options; pt out by david hillMichael Shalayeff
2004-08-17missing inet_ntoa proto and fix an error it uncovers; form Moritz Jodeit ↵Michael Shalayeff
<moritz@jodeit.org>
2004-08-17check for msg->isakmpg_sa being NULL before referencingHans-Joerg Hoexer
ok ho@
2004-08-15escape some minus signs, and keep -Tps happy;Jason McIntyre
2004-08-15Document max file system size and warn user that using non-standardOtto Moerbeek
block or fragment sizes may hurt. ok a bunch of people@
2004-08-14When using -K (keynote disabled), check peers' proposal against isakmpd.conf.Hans-Joerg Hoexer
ok ho@ henning@
2004-08-13extra check for no message case; ok markus, deraadt, hshoexer, henningDamien Miller
2004-08-12Fix compiler warning on alpha.Hans-Joerg Hoexer
Noted by and ok ho@
2004-08-12Avoid memleak on error (Linux/KAME). Found by Benjamin Pineau.Hakan Olsson
2004-08-12Prevent core dump on large block sizes by checking block size againstOtto Moerbeek
MAXBSIZE. ok millert@
2004-08-10update to realityJared Yanovich
- fix syntax usage - remove source routing stuff - mention bgpd - document -t, -genmask (from FreeBSD), and -label - move -rtt, -rttvar, -recvpipe ... into HISTORY - remove ISO mention mdoc fixes sort list of and add syntax usage for sub-commands list supported address families in a separate table consistency and reorganizational fixes elaborate on some topics (some from NetBSD) punctuation, grammar, and rewording fixes add some FILES and cross-refs requested by, help, and ok henning help and ok jmc
2004-08-10spacingTheo de Raadt
2004-08-10Add SADB_X_EXT_LIFETIME_LASTUSE. hshoexer@ okHakan Olsson
2004-08-10Better implementation of the Dead Peer Detection protocol, RFC 3706.Hakan Olsson
hshoexer@ ok.
2004-08-10Linux has AES (and DES). From Benjamin Pineau.Hakan Olsson
2004-08-10If opening /dev/arandom fails, try /dev/random. Suggested by Benjamin Pineau.Hakan Olsson
2004-08-09minor cleanupTheo de Raadt
2004-08-08spacingTheo de Raadt
2004-08-08spacingTheo de Raadt
2004-08-06this will be ok on sgi too (pci arch)Theo de Raadt
2004-08-06not sgimips, be carefulTheo de Raadt
2004-08-06add sgiPer Fogelstrom
2004-08-06build on hppaMichael Shalayeff
2004-08-05better signal cache printfMichael Shalayeff
2004-08-03-src/-srcmask are no moreHenning Brauer
2004-08-03display route labels with "route get", and allow them to be setHenning Brauer
2004-08-03Rewrite the transport reference count code to avoid leaks.Hakan Olsson
hshoexer@ ok.
2004-08-03Handle geometry parameters as unsigned quantities, getting rid ofOtto Moerbeek
negative number of sectors on large disks and other similar problems. Also make reading of ASCII disk labels more robust by using strtonum(3) instead of atoi(3). ok millert@ deraadt@
2004-08-03spacingTheo de Raadt
2004-08-03Handle geometry parameters as unsigned quantities, getting rid of negativeOtto Moerbeek
number of sectors on large disks and other similar problems. ok toby@ tom@ deraadt@
2004-08-03Allow a unicast ip address to be specified for pfsync with the 'syncpeer'Ryan Thomas McBride
keyword. This address is used instead of the multicast address to send state updates; this allows pairs of pfsync firewalls to protect the traffic with IPSec. ifconfig must be updated to match the kernel.
2004-08-02Do not expire unestablished phase 2 SAs on SIGHUP.Hans-Joerg Hoexer
ok ho@
2004-08-02Missed to add virtual.c here. Noted by Benjamin Pineau.Hakan Olsson
2004-07-30mark down some punctuation, and sync usage();Jason McIntyre
2004-07-30Style.Hakan Olsson
2004-07-29Less noise while debugging.Hakan Olsson
2004-07-29Repair NAT-T using Aggressive mode, NAT-D checks were in the wrong place.Hakan Olsson
Noted by Yvan VANHULLEBUS.
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-30 02:18:56 +0000