summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Expand)Author
2003-05-18struct sockaddr is not large enough in itself to contain the addressHakan Olsson
2003-05-18More isakmpd privsep work. X509 private keys are now kept in the privilegedHakan Olsson
2003-05-18Sysdep for native Linux IPSec, 2.5 and later. From Thomas Walpuski, withHakan Olsson
2003-05-17Better return codes from mm_send_fd and mm_receive_fdHakan Olsson
2003-05-17Use log_error(), not log_fatal().Hakan Olsson
2003-05-17tweak;Jason McIntyre
2003-05-17Fix proxy related output.Daniel Hartmeier
2003-05-17A little bugfix. We want pfioc_states, not pfioc_state.Ryan Thomas McBride
2003-05-17support inverse matching on tags likeHenning Brauer
2003-05-16If the "Renegotiate-on-HUP" tag is defined in the [General] section, aHakan Olsson
2003-05-16TCP SYN proxy. Instead of 'keep state' or 'modulate state', one can useDaniel Hartmeier
2003-05-15make getifaddrs(3) a default, as all BSD has it by nowJun-ichiro itojun Hagino
2003-05-15properly complain about too long tagsHenning Brauer
2003-05-15Correct a two year old typo, which might actually makeHakan Olsson
2003-05-15Cleanup. Do not store the private key in either the exchange or sa structs.Hakan Olsson
2003-05-15Work around some OpenSSL BIO "features" to read the key correctly.Hakan Olsson
2003-05-15Proper exit of the monitor process.Hakan Olsson
2003-05-15wait() for the child processHakan Olsson
2003-05-15Start of privilege separation for isakmpd.Hakan Olsson
2003-05-15(c)Hakan Olsson
2003-05-14add scrub modifier "reassemble tcp" to turn on stateful TCP normalizationsMike Frantzen
2003-05-14properly terminate debug string (levels >=40)Kjell Wooding
2003-05-14Remove the .if/.endif stuff that gmake does not understand.Hakan Olsson
2003-05-14tagging on binatHenning Brauer
2003-05-14enabled tagging on rdr rulesHenning Brauer
2003-05-14Call the FreeS/WAN sysdep 'freeswan'. The 'linux' sysdep will be native Linux...Hakan Olsson
2003-05-14Default public key directory definition sanity.Hakan Olsson
2003-05-14Policy file default defined twice, kill the local copy.Hakan Olsson
2003-05-14Fix a typo (in unused code).Hakan Olsson
2003-05-14I did not test this enough. Unbreak.Hakan Olsson
2003-05-14pflogd now uses the new pflog link type. Trying to append to an existingCan Erkin Acar
2003-05-14Minor format string correctness.Chad Loder
2003-05-14The ramdac's hater club is proud to present new yet another SBus frameMiod Vallat
2003-05-14with tag/tagged given, only whine about missing keep state on pass rulesHenning Brauer
2003-05-14allow SCRUB rules to specify protocol again. broken sometime in the past.Mike Frantzen
2003-05-14tags on nat rules:Henning Brauer
2003-05-14gotta xref boot_hppa from hereMichael Shalayeff
2003-05-14move ETHERTYPE_xx declarations to <net/ethertypes.h>. meets netbsd practice.Jun-ichiro itojun Hagino
2003-05-14Add the -q flag to suppress all output when setting a variableJean-Francois Brousseau
2003-05-14print the redirection target for nat/rdr/binat slighly later.Henning Brauer
2003-05-13make sure tagging is only ever used with stateful filter rulesHenning Brauer
2003-05-13correct rule printingHenning Brauer
2003-05-13userland part for tagging.Henning Brauer
2003-05-12update for mount args changeTed Unangst
2003-05-12update for mount args changesTed Unangst
2003-05-12Update with some data for NAT-T specific payload types, IKEv2Hakan Olsson
2003-05-12AES -> AES_128_CBCHakan Olsson
2003-05-12Add two more encapsulation types (UDP encap, potential future NAT-T)Hakan Olsson
2003-05-12Adaptive timeout value scaling. Allows to reduce timeout values as theDaniel Hartmeier
2003-05-11Slight style fix for .cst files. Permit comments also after a definition.Hakan Olsson