summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Expand)Author
2004-05-10write filter and lock bpf descriptor before dropping privileges,Can Erkin Acar
2004-05-10Check return value of fclose() calls after writing.Otto Moerbeek
2004-05-10Do not always print banner page.Otto Moerbeek
2004-05-10Make the accept socket non-blocking. Should not matter since weTodd C. Miller
2004-05-10when adding a new group to /etc/groups, place it just before the firstTheo de Raadt
2004-05-09prettyTheo de Raadt
2004-05-08off by one in key too long detectionHenning Brauer
2004-05-08fix redefinition detection with manual keyes ipsecHenning Brauer
2004-05-08with manual keyed ipsec, we need keys and spis for both directions -Henning Brauer
2004-05-08Filter bpf writes and lock descriptor. tested by hshoexer@Can Erkin Acar
2004-05-08as bloody attempt to document neighbor cloningHenning Brauer
2004-05-08lots of munging about; canacar ok, tested by pb, looked at by various othersTheo de Raadt
2004-05-08a bloody attempt at documenting the ipsec fluff.Henning Brauer
2004-05-08KNFHenning Brauer
2004-05-08break out the consistency checking for neighbors in its own function,Henning Brauer
2004-05-08do not omit the IPv6 listening addressHenning Brauer
2004-05-08provide log_sockaddr, which uses getnameinfo(), and use it inHenning Brauer
2004-05-08allow for neighbor statements without { parameters } block; everythingHenning Brauer
2004-05-08add support for ipsec ah with manual keys, pfkey part already does so, andHenning Brauer
2004-05-08factor out the string -> key conversion code used for md5sig and twice for ipsecHenning Brauer
2004-05-08remove unused argument to control_dispatch_msg(), lintHenning Brauer
2004-05-08remove hostname lookup stuff, done at parse time now, ok theoHenning Brauer
2004-05-08resolve hostnames at parse time, solves PR3771, ok theoHenning Brauer
2004-05-08implement and use prefixlen2mask() instead of doing it by hand 3 timesHenning Brauer
2004-05-08Pass the length of what was captured to pfsync_print, not the lengthRyan Thomas McBride
2004-05-07This makes afsd drop priviledge to user _afs inside a chroot (theBob Beck
2004-05-07Fix some sizeof(ptr) bugs based on diffs from aaron@.Todd C. Miller
2004-05-07add a filter option to dump prefixes learned in UPDATEs into a PF table,Damien Miller
2004-05-06spacingTheo de Raadt
2004-05-06knf and other cleanupsTheo de Raadt
2004-05-06pppoe now drops privileges to user _ppp and chroots after settingCan Erkin Acar
2004-05-06debug.c not usedTheo de Raadt
2004-05-06actually reset p->auth_established to 0 in pfkey_[md5sig|ipsec]_removeHenning Brauer
2004-05-06we need a seperate field for the md5 key len, can't use strlen, noticedHenning Brauer
2004-05-06oups, spacesHenning Brauer
2004-05-06print Multiprotocol capabilities slightly nicerHenning Brauer
2004-05-06the Address Family Identifier field in the capability announcement isHenning Brauer
2004-05-06do not punish the peer (by holding him in IDLE for IdleHoldTime seconds) whenHenning Brauer
2004-05-06.Fl for flags, .Ar for arguments;Jason McIntyre
2004-05-06improve logging in teh capabilities parserHenning Brauer
2004-05-06scale socket buffer sizes (and thus window size) up to up to 64k,Henning Brauer
2004-05-06whitespace;Jason McIntyre
2004-05-06there's a little race condition: a session is taken down and its associatedHenning Brauer
2004-05-05Use RFC1323 PAWS timestamps as a logical extension to the conventional TCPMike Frantzen
2004-05-05simplify license. ok author.Jakob Schlyter
2004-05-05move static filter out of functionTheo de Raadt
2004-05-04bye bye bootpd. You will not be missed.Theo de Raadt
2004-05-04disable bootpd and friends. everyone -- get used to dhcpd for this. ifTheo de Raadt
2004-05-04remove DEBUG_PACKET stuff; henning okTheo de Raadt
2004-05-04remove unused stuff; henning okTheo de Raadt