| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2004-02-07 | it's about time to document tcp md5sig ... | Henning Brauer | |
| jmc help and ok | |||
| 2004-02-07 | send filter rules to the RDE on reloads, help & ok claudio | Henning Brauer | |
| 2004-02-07 | when connected routes show up at runtime we have to set ifindex in struct kif | Henning Brauer | |
| 2004-02-07 | houps, fetchtable() had the default route special cased... bad. | Henning Brauer | |
| sin_len == 0 here too. | |||
| 2004-02-07 | the sockaddr holding the netmask and advertised by rtm_addrs might | Henning Brauer | |
| mave sa_len == 0 to indicate a mask of /0 | |||
| 2004-02-07 | sin_family in the sockaddr_n representing the netmask we sniffed on the | Henning Brauer | |
| routing socket is meaningless. so we're better off not checking it. | |||
| 2004-02-06 | use a struct bgpd_addr for the address token instead of a in_addr, claudio ok | Henning Brauer | |
| 2004-02-06 | initial cut at the filtering language. | Henning Brauer | |
| structs etc to describe a rule, filter rule list management parser groks filter defs now. claudio ok, discussion & help also jakob theo | |||
| 2004-02-05 | allocate curpeer little earlier. | Henning Brauer | |
| there's a rather obscure error path where teh later allocation causes trouble, claudio ok | |||
| 2004-02-05 | error message tuning | Henning Brauer | |
| more power! | |||
| 2004-02-05 | introduce group IDs. will be needed for filtering (or rather, ease things | Henning Brauer | |
| there) just assign them from the neighbor ID pool - fortunately, that is rather simple, we just have to make sure that all members of the group and (later) all filter rules pointing to the group agree on the ID, but it does not need to stay the same across config reloads. ok claudio@ | |||
| 2004-02-05 | Emphasise 'stderr'. | Ryan Thomas McBride | |
| ok henning@ | |||
| 2004-02-04 | Move BGP path attribute handling functions in a own file. henning@ conceptual ok | Claudio Jeker | |
| 2004-02-04 | Move the update generation into a separate file. The update generation has | Claudio Jeker | |
| nothing to do with the decision process. henning@ "conceptual ok ;-)" | |||
| 2004-02-03 | replace the previous hack for the internal peer id allocator (which just used | Henning Brauer | |
| the peer's ip address as u_int32_t) by a real id allocator that tries to keep locality high. claudio ok | |||
| 2004-02-03 | defer free()ing the previous peer list until after parsing the config file | Henning Brauer | |
| so in the parser we can access it. will be needed soon. | |||
| 2004-02-02 | close socket on error in control_init | Henning Brauer | |
| From: Patrick Latifi <pat@eyeo.org> | |||
| 2004-02-02 | 2 missing returns in error pathes | Henning Brauer | |
| From: Patrick Latifi <pat@eyeo.org> | |||
| 2004-02-02 | * use macro expansion instead of hardcoding 'buf'. | Henning Brauer | |
| From: Patrick Latifi <pat@eyeo.org>, claudio ok | |||
| 2004-02-02 | spaces | Theo de Raadt | |
| 2004-02-02 | Fix bug in the decision process. The decision process is unable to directly | Claudio Jeker | |
| detect changes of the active prefix. This bug is only triggered when a nexthop changes state. While doing that clarify prefix_move a bit. OK henning@ | |||
| 2004-02-02 | Somehow I missed this peace in one of my last commits. OK henning@ | Claudio Jeker | |
| 2004-02-02 | Use correct struct in sizeof for calloc. OK henning@ | Claudio Jeker | |
| 2004-02-02 | Seal a memory leak and fix a format string, conf->as is unsigned. | Claudio Jeker | |
| OK henning@ | |||
| 2004-02-01 | Update: document the network statement and update the announce description | Claudio Jeker | |
| OK henning@ | |||
| 2004-02-01 | Set sane default announce types according to the peer type. For IBGP use | Claudio Jeker | |
| announce all and for EBGP use announce self. OK henning@ | |||
| 2004-02-01 | put v6 cruft into session_up() while beeing there... claudio ok | Henning Brauer | |
| 2004-01-31 | rename tcp sockopt TCP_SIGNATURE_ENABLE to TCP_MD5SIG | Henning Brauer | |
| requested by theo ok markus@ hshoexer@ | |||
| 2004-01-30 | in the parse_config() -> merge_config() chain, you shall not null | Henning Brauer | |
| conf->opts that holds some of the command line opts. repairs -n. | |||
| 2004-01-30 | missing free() in an error path that should be unreachable | Henning Brauer | |
| From: Patrick Latifi <pat@eyeo.org> | |||
| 2004-01-30 | please sparc64, with & ok claudio | Henning Brauer | |
| 2004-01-30 | -enable md5sig on the listening socket | Henning Brauer | |
| -on connections we just accepted, check wether md5sig is configured for that peer, and check wether the connection is md5sig'd too. if not, refuse tested against cisco 7200. | |||
| 2004-01-29 | enable tcp md5sig om the connecting socket when md5sig is configured for that | Henning Brauer | |
| peer. I just successfully established an md5sig'd session against a cisco 7200 with that. | |||
| 2004-01-28 | properly whine when password is too long instead of silently truncating | Henning Brauer | |
| 2004-01-28 | implement | Henning Brauer | |
| tcp md5sig password so that the key can be given in ascii, what unfortunately limits the key space (cisco/juniper compat...) we keep the ability to specify the key in hex whithout these limits. help & ok markus | |||
| 2004-01-28 | improve logging | Henning Brauer | |
| 2004-01-28 | KNF | Henning Brauer | |
| 2004-01-28 | -rename pfkey_setkey to pfkey_sa_add | Henning Brauer | |
| -implement pfkey_sa_remove -use it in pfkey_auth_remove we now properly remove the SAs we added on bgpd shutdown ok markus | |||
| 2004-01-28 | fix pfkey_reply() logic: | Henning Brauer | |
| we always need to read the full message or we find old crap next time much more difficult to find than it sounds here... with & ok markus | |||
| 2004-01-28 | catch SIGINT here as well so we can properly shut down if ^C'ed in debug mode | Henning Brauer | |
| 2004-01-28 | STOP events for all sessions before we exit. | Henning Brauer | |
| allows for some cleanup to happen, especially we need this to remove the md5sig flows | |||
| 2004-01-28 | missing free and fix memset misuse; From: Patrick Latifi <pat@eyeo.org> | Henning Brauer | |
| tho i fixed that using bzero instead | |||
| 2004-01-28 | repair the bind() in session_connect; only used if local-addr was specified | Henning Brauer | |
| got broken in the sockaddr_in -> bgpd_addr conversion | |||
| 2004-01-28 | improve logging | Henning Brauer | |
| 2004-01-28 | we need a pfkey_init the gets us a PF_KEY socket before we drop privs | Henning Brauer | |
| eases other code quite a bit in exchange... | |||
| 2004-01-28 | call pfkey_auth_establish() on START events | Henning Brauer | |
| call pfkey_auth_remove when a session drops back to IDLE state ok markus@ claudio@ | |||
| 2004-01-28 | -struct peer_auth to store the SPIs, linked into struct peer | Henning Brauer | |
| -add pfkey_auth_establish(), which sets up flows for both directions and stores the SPIs in above struct -add (yet dummy) pfkey_auth_remove() with markus, ok claudio markus | |||
| 2004-01-28 | don't pfkey_setkey() from here, claudio markus ok | Henning Brauer | |
| 2004-01-28 | initial support for SADB_DELETE; ok hshoexer | Markus Friedl | |
| 2004-01-28 | pfkey_setkey: sockaddr -> bgpd_addr; ok claudio | Markus Friedl | |
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |