summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2021-01-18Remove c++ comment that snuck in and remove useless debug output.Florian Obser
2021-01-18Sync SA configuration payload to new SA after IKE SA rekeying.tobhe
2021-01-17umb(4) sets a default interface priority too; mention it hereStuart Henderson
2021-01-17Mark up locations of KAME hack with #ifdef __KAME__ so that we canFlorian Obser
2021-01-16Oops, fix previous.Florian Obser
2021-01-16Only recover the KAME embedded scope if the sin6_scope_id is notFlorian Obser
2021-01-16Only recover the scope_id if it was not set. This way this code worksClaudio Jeker
2021-01-16Only recover the KAME embedded scope if the sin6_scope_id filed isClaudio Jeker
2021-01-13kernel, sysctl(8): remove dead variable: tickadjcheloha
2021-01-13Temporary addresses are preferred for 1 day and valid for 2.Florian Obser
2021-01-12Implement listening on 53/TCPFlorian Obser
2021-01-12Rewrite query parsing and answer formatting using libunbound providedFlorian Obser
2021-01-12Sometimes a user ID was logged in pflog(4) although the logopt ofAlexander Bluhm
2021-01-06do not call log_addr() when the address is NULLanton
2021-01-02add three missing .Dv macros,Ingo Schwarze
2020-12-30getifaddrs() can return entries where ifa_addr is NULL. Check for thisSebastian Benoit
2020-12-29getifaddrs() can return entries where ifa_addr is NULL. Check for thisSebastian Benoit
2020-12-29getifaddrs() can return entries where ifa_addr is NULL. Check for thisSebastian Benoit
2020-12-29If we manage to send all "count" flood pings before receiving allFlorian Obser
2020-12-28Add back keyword "any" to match any IP address, which actually workstobhe
2020-12-28Add support for kern.video.record.Marcus Glocker
2020-12-27Fix "any" and "dynamic" keywords for flows and add proper IPv6 support.tobhe
2020-12-26Update default preference listkn
2020-12-26Otto hit an impossible situation: an answer bigger than 64k.Florian Obser
2020-12-22Log SPI with SPI_SH() wherever possible.tobhe
2020-12-21Use policy_test() to reassign existing SAs to updated policies aftertobhe
2020-12-20Don't leak ipsec_hosts when building hosts_list.tobhe
2020-12-17Use strtonum() instead of atoi() to parse port option.tobhe
2020-12-17Sort command line options.tobhe
2020-12-16Fail to parse rules with invalid rangeskn
2020-12-16Reject rules with invalid port rangeskn
2020-12-15Fix leak of REQUEST string.tobhe
2020-12-13Make sure flow src and dst addresses have the same address family.tobhe
2020-12-11The keyword "any" does not actually work properly for traffic selectors.tobhe
2020-12-11Introduce query_imsg2str() to simplify printing "qname class type".Florian Obser
2020-12-11The recent fix to handle large answers in unwind (errata #5 for 6.8)Florian Obser
2020-12-11Warning: arithmetic on a pointer to void is a GNU extension; mergedFlorian Obser
2020-12-11Sprinkle in some static to prevent missing prototype warnings; mergedFlorian Obser
2020-12-11sync to libunbound 1.13.0Florian Obser
2020-12-11pass down the `skip' flag to the mountfs() function in the case ofRobert Nagy
2020-12-10Simplify '-i' handling, failing immediately during command line parsingKenneth R Westerback
2020-12-10Print valid ikesa/childsa configuration at startup. Comma seperatedtobhe
2020-12-07synproxy should be processing incoming SYN packets only.Alexandr Nedvedicky
2020-12-06Oops. Missed chunk in previous.Kenneth R Westerback
2020-12-06Add support for RSASSA-PSS signature verification (RFC 7427).tobhe
2020-12-06fatal() immediately whem parsing command line option '-c' reveals a non-existantKenneth R Westerback
2020-12-05Make len unsigned.tobhe
2020-12-04Log pfkey type and message length on write failure.tobhe
2020-12-03Fix type mismatch. auth_method should be uint8_t.tobhe
2020-12-02The skip steps must be set up for each attribute independentlytobhe