Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-04-28 | rename sock to fd | Theo de Raadt | |
2004-04-28 | sort | Markus Friedl | |
2004-04-28 | add tcpdrop | Markus Friedl | |
2004-04-28 | kill whitespace and make example consistent w/ rest of page; | Jason McIntyre | |
2004-04-28 | Pointer that are used later in the code should be initalized. Fixes a crash | Claudio Jeker | |
noticed by Henning. OK henning@ | |||
2004-04-28 | It is a big pleasure for me to remove this highe pile of gunk from the tree. | Henning Brauer | |
dhclient, dhcrelay and dhcpd have been factored out and cleaned up big time, dhcpd and dhcrelay chroot itself, drop privileges and lock their bpf descriptors after applyiing read/write filters now, and this pile of ISC code with it's lovely char ServerName; /* Name of Server */ constructs is obsolete. theo ok, I owe you some beers for this pleasure | |||
2004-04-28 | speed up -> sped up, from tedu@, ok beck@ | Cedric Berger | |
2004-04-28 | Use the string version of system. Works with PAGER=less -s. | Marc Espie | |
ho@ | |||
2004-04-28 | slightly more intricate selectors code. | Marc Espie | |
Approved by at least sturm@ and fries@ | |||
2004-04-28 | Blech, SFS yields weird mount/df shit. | Marc Espie | |
Non absolute mount points ? give me a break. Fix for ugly nonsense. Problem reported by David Mazieres. | |||
2004-04-28 | if a peer follows the extremely misgiuded path that the RFCs just barely allow | Henning Brauer | |
to send a NOTIFICATION and thus ternminating the session when it sees a capability it doesn't support (who would guess: zebra does so), parse the data section of the notifcication to find out what what capabilties it didn't like and do not advertise them the next time the session gets up. In case we get a notification about unsupported capabilities with an empty data part (don't ask for RFCs... and guess who does that), disable capabilty announcement alltogether. claudio ok | |||
2004-04-28 | FILE * leak; henning ja ja ja ja | Theo de Raadt | |
2004-04-28 | clean up EXAMPLES; | Jason McIntyre | |
ok pb@ | |||
2004-04-28 | Improve a bit. ok markus@ | Otto Moerbeek | |
2004-04-28 | Put authpf user's IP addresses in the <authpf_users> table. | Cedric Berger | |
ok deraadt@ dhartmei@ markus@ mcbride@ | |||
2004-04-28 | support for AH flows and SAs | Markus Friedl | |
2004-04-28 | Unbreak the stuff that I commited first that was totaly broken. OK henning@ | Claudio Jeker | |
2004-04-28 | allow ah/esp spec with IKE, markus ok | Henning Brauer | |
2004-04-28 | do not give up on ESRCH, someone might have mucked with ipsecadm behind | Henning Brauer | |
our back, markus ok | |||
2004-04-28 | make this at least compile | Henning Brauer | |
2004-04-28 | make sure send and reply are in sync; ok henning | Markus Friedl | |
2004-04-28 | Enable route refresh in the RDE. Now peer can request route refreshes. | Claudio Jeker | |
OK henning@ | |||
2004-04-28 | keep track of which ipsec/md5 SAs we inserted - ESRCH on blind removal | Henning Brauer | |
otherwise, markus ok | |||
2004-04-28 | Make tcpdump print carp as carp. Printing vrrp can be forced with -T vrrp. | Ryan Thomas McBride | |
ok markus@ pb@ | |||
2004-04-28 | prevent multiple auth methods to be specified | Henning Brauer | |
2004-04-28 | spacing | Theo de Raadt | |
2004-04-28 | remove XXX that is wrong | Theo de Raadt | |
2004-04-28 | spacing | Henning Brauer | |
2004-04-28 | correct yacc | Theo de Raadt | |
2004-04-28 | don't load SAs into the kernel if IKE is used. | Markus Friedl | |
2004-04-28 | keep route refresh counters into account when building sums, and | Henning Brauer | |
print route refresh counters in the neighbor view | |||
2004-04-28 | prefix the auth related defines by AUTH_, we had a name clash, markus ok | Henning Brauer | |
2004-04-28 | IPv6 support; ok beck@ | Damien Miller | |
2004-04-27 | teach printconf about all this shiny new ipsec stuff | Henning Brauer | |
2004-04-27 | set conf.auth.methodod for md5, too | Markus Friedl | |
2004-04-27 | ike before in | Henning Brauer | |
2004-04-27 | rename the ipsec struct to auth, move all tcpmd5 related fields in there, and | Henning Brauer | |
add a generic "method" field that expresses what method (none/md5sig/ipsec manual/ipsec ike) is in use markus ok | |||
2004-04-27 | parser parts for ipsec ike, markus ok | Henning Brauer | |
2004-04-27 | getaddrinfo 4th arg has to be non-null. Gerard gerritsen | Jun-ichiro itojun Hagino | |
2004-04-27 | add an example w/ fstat(1) | Philipp Buehler | |
2004-04-27 | two missing breaks, repairs tcpmd5, with markus | Henning Brauer | |
2004-04-27 | initial documentation | Markus Friedl | |
2004-04-27 | restrict the ipsec flows to BGP only; ok henning | Markus Friedl | |
2004-04-27 | Set oldp en oldlenp to NULL; provide feedback; set exit status. | Otto Moerbeek | |
ok markus@ | |||
2004-04-27 | unbreak^2 | Henning Brauer | |
2004-04-27 | repair | Henning Brauer | |
2004-04-27 | various small fixes; | Jason McIntyre | |
ok mcbride@ | |||
2004-04-27 | crud stripping; henning ok | Theo de Raadt | |
2004-04-27 | do the errno ERANGE dance around a strtol; henning ok | Theo de Raadt | |
2004-04-27 | announce route refresh capability, and parse announced route refresh capa | Henning Brauer | |