summaryrefslogtreecommitdiff
path: root/share/man/man8
AgeCommit message (Collapse)Author
2005-04-17document effects of net.inet.ip.forwarding=2, and refer to relatedJason McIntyre
sysctls in sysctl(3); pointed out by msf@
2005-04-17merge/remove EXAMPLES:Jason McIntyre
previously we were documenting in 2 places how to set up ipsecadm stuff, and in one place isakmpd. this led to inconsistencies and repitition. sanity checks + ok hshoexer@
2005-04-16add isakmpd.policy to FILES and sort;Jason McIntyre
2005-04-15spacing, and a typo;Jason McIntyre
2005-04-15make the examples in this page work for a simple 2 machine, directlyJason McIntyre
connected, setup; encourage people to try this way before using for real; ok hshoexer@
2005-04-15add `enable packet forwarding' to initial summary;Jason McIntyre
use `automated' keying, not `automatic', since the rest of the page does;
2005-04-14detail missing step in summary;Jason McIntyre
2005-04-14remove BUGS section, as no longer relevant;Jason McIntyre
ok hshoexer@ markus@
2005-04-14don't forget to enable pf and load ruleset;Jason McIntyre
2005-04-14simplify filter rules somewhat:Jason McIntyre
- use a macro for ext_if - use 1 block rule (rather than block in and out)
2005-04-14- example policy files are identical for machines A and B, so combineJason McIntyre
into one step - mention necessary permissions for isakmpd.policy - document these permissions are needed because of sensitive information, not just because of shared secrets: isakmpd.policy need not contain a shared secret - remove useless .Pp agreed w/ hshoexer@
2005-04-14tidy up "Choosing a key exchange method", and do not confuse punter;Jason McIntyre
ok hshoexer@
2005-04-14reduce diff between isakmpd.conf sections for machines A and B;Jason McIntyre
2005-04-14we already have a section on configuring firewall rules, so refer to itJason McIntyre
in EXAMPLES rather than reproducing info (and confusing people); make the firewall section of manual and automatic keying the same; this also fixes an issue reported by steve murdoch back in november, that parts of vpn(8) were repeating themselves; sorry to take so long to fix this, steve;
2005-04-14make this part consistent too;Jason McIntyre
2005-04-14do not mess about w/ the order of macros in pf rules, it just makesJason McIntyre
the page harder to read;
2005-04-14make the intro a little more consistent;Jason McIntyre
2005-04-13although the example gateway addresses given are private IP addresses, make itJason McIntyre
clear that this is an example only, and would normally be public addresses; ok hshoexer@ henning@ msf@
2005-04-12remove /32 netmasks as they're confusing and not needed;Jason McIntyre
ok hshoexer@
2005-04-08make distrib-dirs, ok ottoHenning Brauer
2005-04-05since csh is no longer the default root shell, and advice to not log in asJason McIntyre
`root' was removed in dot.login -r1.11, remove text which says it happens; tweak the rest while i'm in here; spotted by david@
2005-04-02.Dt arg should be hppa64, not hppa;Jason McIntyre
2005-04-02enter the right directory...Theo de Raadt
2005-04-02make one out of hppa w/ old pdc sections deletedMichael Shalayeff
2005-04-02make this page look better;Jason McIntyre
2005-04-01build someTheo de Raadt
2005-04-01+ man8.hppa64Theo de Raadt
2005-04-01syncTheo de Raadt
2005-03-29RegenMiod Vallat
2005-03-29Regen.Miod Vallat
2005-03-27tweaks;Jason McIntyre
2005-03-26some minimalistic hppa/hpux additionsMichael Shalayeff
2005-03-12escape `.' at eol to avoid double spacing issue;Jason McIntyre
2005-03-11cdrom/CDROM -> CD-ROM;Jason McIntyre
2005-03-02back out sendbug rejection line;Jason McIntyre
requested by deraadt@
2005-03-02note that non-generic kernels not advised;Jason McIntyre
diff originally from stuart henderson, reworded by krw@ ok ian@ krw@ hshoexer@
2005-03-02clarify section on packet forwarding;Jason McIntyre
kill redundant blurb about virtual interfaces; ok hshoexer@ deraadt@
2005-03-01RegenMiod Vallat
2005-02-18update SEE ALSO, and a tweak;Jason McIntyre
2005-02-17Xr fstat, netstat, psMarc Espie
after discussion with henning/otto, okay various people...
2005-01-31fix ugly line split: from raymond lillard;Jason McIntyre
use displays where possible - they're much tidier;
2005-01-29kernel can be gzipped on the MacOS sideMartin Reindl
help from miod@, ok jmc@
2005-01-28syncDan Harnett
2005-01-19syncTheo de Raadt
2005-01-18syncDale Rahn
2005-01-14RegenMiod Vallat
2005-01-10regenDavid Gwynne
2005-01-07document bsd.mp;Jason McIntyre
2005-01-06- document /etc/security's .secure hooksJason McIntyre
- sync the comments in /etc/security ok millert@
2005-01-02RegenMark Kettenis