summaryrefslogtreecommitdiff
path: root/usr.sbin/bgpd/parse.y
AgeCommit message (Expand)Author
2004-05-08off by one in key too long detectionHenning Brauer
2004-05-08fix redefinition detection with manual keyes ipsecHenning Brauer
2004-05-08with manual keyed ipsec, we need keys and spis for both directions -Henning Brauer
2004-05-08KNFHenning Brauer
2004-05-08break out the consistency checking for neighbors in its own function,Henning Brauer
2004-05-08allow for neighbor statements without { parameters } block; everythingHenning Brauer
2004-05-08add support for ipsec ah with manual keys, pfkey part already does so, andHenning Brauer
2004-05-08factor out the string -> key conversion code used for md5sig and twice for ipsecHenning Brauer
2004-05-07add a filter option to dump prefixes learned in UPDATEs into a PF table,Damien Miller
2004-05-06we need a seperate field for the md5 key len, can't use strlen, noticedHenning Brauer
2004-05-04Correctly plug the memory leak and fix a error message.Claudio Jeker
2004-04-30plug memory leaks; henning okTheo de Raadt
2004-04-30spellingTheo de Raadt
2004-04-29sock -> fd; ok henningTheo de Raadt
2004-04-28FILE * leak; henning ja ja ja jaTheo de Raadt
2004-04-28allow ah/esp spec with IKE, markus okHenning Brauer
2004-04-28prevent multiple auth methods to be specifiedHenning Brauer
2004-04-28prefix the auth related defines by AUTH_, we had a name clash, markus okHenning Brauer
2004-04-27set conf.auth.methodod for md5, tooMarkus Friedl
2004-04-27ike before inHenning Brauer
2004-04-27rename the ipsec struct to auth, move all tcpmd5 related fields in there, andHenning Brauer
2004-04-27parser parts for ipsec ike, markus okHenning Brauer
2004-04-27crud stripping; henning okTheo de Raadt
2004-04-27curpeer must be set back to curgroup, not NULLHenning Brauer
2004-04-26need more checks on the keysHenning Brauer
2004-04-26unbreakHenning Brauer
2004-04-26don't forget to set keylen, markusHenning Brauer
2004-04-26parser support for setting ipsec keys and such, markus okHenning Brauer
2004-04-25reserve upper half of the (internal) ID space for cloned neighbors, claudio okHenning Brauer
2004-04-25fix check wether local-address and neighbor are of same address family -Henning Brauer
2004-04-25add "neighbor cloning", allowing you to specify a prefix and prefixlengthHenning Brauer
2004-04-24some rather boring windows talk at cansecwest made me hack initial supportHenning Brauer
2004-03-11There is no cnumber token in the parser so don't define a type for it.Claudio Jeker
2004-03-11yes, the keyword table has to be sorted ;-)Henning Brauer
2004-03-11Add basic support for communities. Currently it is only possible to filterClaudio Jeker
2004-03-10oupsHenning Brauer
2004-03-10implement framework to announce capabilities in the open messages we send.Henning Brauer
2004-03-08mem leaks in error pathes, mostly from Patrick LatifiHenning Brauer
2004-03-08typo in format strin (ugh!) and few missing free()s, partitially fromHenning Brauer
2004-03-06plug a memory leak in the lexer.Henning Brauer
2004-03-05plug a couple of memory leaks, Patrick LatifiHenning Brauer
2004-03-02KNFHenning Brauer
2004-03-02flesh out the address and prefix parsing, include v6 code, but reject v6Henning Brauer
2004-03-01make sure AS doesn't exceed upper bound, issue pointed out byHenning Brauer
2004-03-01KNFHenning Brauer
2004-03-01Sync printconfig.c with parse.y. OK henning@Claudio Jeker
2004-03-01Make it possible to diable the decision process. This is a feature only usefulClaudio Jeker
2004-02-26Implement "enforce neighbor-as yes|no" which is by default on for ebgpClaudio Jeker
2004-02-26No comma at the end of the keywords array. OK henning@Claudio Jeker
2004-02-26Add per netwok definition filter sets. So you can now useClaudio Jeker