| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Remove unnused af argument from unmask(), sync with pfctl |   kn | 2018-09-07 | 1 | -5/+4 |
| * | Support collapsing flow outputs. |   mpi | 2017-11-20 | 1 | -8/+196 |
| * | Rename all SA groups to bundles consistently. The first kernel |   bluhm | 2017-04-19 | 1 | -8/+8 |
| * | Now that the kernel provides information about IPsec SA bundles, | bluhm | 2017-03-02 | 1 | -4/+1 |
| * | Remove NULL-checks before free(). ok tb@ |   mmcc | 2015-12-10 | 1 | -31/+16 |
| * | Replace <sys/param.h> with <limits.h> and other less dirty headers where |   deraadt | 2015-01-16 | 1 | -2/+1 |
| * | Yet more #include de-duplication. |   krw | 2014-11-20 | 1 | -2/+1 |
| * | don't output "esn" string in the rule section as we can't use the |   mikeb | 2012-07-05 | 1 | -3/+1 |
| * | Print esn flag when dumping SAs with ESN enabled | mikeb | 2012-06-29 | 1 | -2/+4 |
| * | - put -i in the right place |   jmc | 2011-11-08 | 1 | -2/+2 |
| * | allow the path to isakmpd's fifo to be specified (aka changed) on the |   henning | 2011-11-08 | 1 | -4/+10 |
| * | A warning text in ipsecctl was used twice. Make the messages unique | bluhm | 2009-01-27 | 1 | -2/+2 |
| * | Add support to isakmpd(8) and ipsecctl(8) to install SA's with a |   mpf | 2009-01-20 | 1 | -1/+3 |
| * | Free the rules in the rule_queue also if ipsecctl is called with | bluhm | 2008-07-21 | 1 | -7/+13 |
| * | Isakmpd acquire mode did not work with a config generated from | bluhm | 2008-07-01 | 1 | -1/+3 |
| * | in all these programs using the same pfctl-derived parse.y, re-unify the | deraadt | 2007-10-13 | 1 | -20/+2 |
| * | no need to include both sys/types.h and params.h |   hshoexer | 2007-08-21 | 1 | -2/+1 |
| * | do not display empty authkey/enckey line when -k option is not | hshoexer | 2007-02-19 | 1 | -3/+3 |
| * | add -k to usage(); | jmc | 2007-01-10 | 1 | -2/+2 |
| * | do not print secret keys by default, -k restores old behaviour; ok hshoexer |   markus | 2007-01-03 | 1 | -2/+8 |
| * | handle multiple SAs with different same src/dst but different port; | markus | 2006-11-30 | 1 | -1/+7 |
| * | When using -vv, also show grouped SAs. | hshoexer | 2006-11-10 | 1 | -1/+19 |
| * | KNF unrelated to previous commit. |   mcbride | 2006-11-01 | 1 | -2/+2 |
| * | Add support for aggressive mode (from the k2k6 IPsec hackathon). | mcbride | 2006-11-01 | 1 | -9/+9 |
| * | sort SAs by spi; ok hshoexer | markus | 2006-09-19 | 1 | -4/+39 |
| * | Security Association Database is abbreviated 'SAD' (RFC 2401 et al), not 'SADB'. jmc@, hshoexer@ ok. |   ho | 2006-08-31 | 1 | -3/+3 |
| * | fix usage, make synopsis more pretty. noticed by david@ | hshoexer | 2006-06-08 | 1 | -2/+2 |
| * | exit(2) when loading of rules did work partially. ok markus@ | hshoexer | 2006-06-02 | 1 | -7/+11 |
| * | add trailing \ when printing multiple lines for an SA, this way | markus | 2006-06-02 | 1 | -3/+3 |
| * | allow to specify phase 1 and 2 lifetimes. Right now, these values | hshoexer | 2006-06-02 | 1 | -1/+9 |
| * | Support flows with port modifiers for proto tcp/udp, e.g. |   naddy | 2006-06-01 | 1 | -1/+23 |
| * | more to free, needed for SA grouping. | hshoexer | 2006-06-01 | 1 | -7/+13 |
| * | convert pfkey to ipsec_rule and use ipsecctl_print_rule() when dumping | markus | 2006-06-01 | 1 | -2/+1 |
| * | Prepare for SA grouping. | hshoexer | 2006-06-01 | 1 | -1/+2 |
| * | correct error messages to match calloc where appropriate |   todd | 2006-06-01 | 1 | -2/+2 |
| * | rename list link for ipsec_rule structures from "entries" to "rule_entry". | hshoexer | 2006-06-01 | 1 | -4/+4 |
| * | implement monitor mode for ipsecctl. worked on with markus@ |   msf | 2006-05-30 | 1 | -2/+17 |
| * | add ipsecctl_free_rule() for cleaning up rules. | hshoexer | 2006-05-29 | 1 | -39/+45 |
| * | wenn dumping rules always show type, srcid and dstid (if set). | hshoexer | 2006-03-31 | 1 | -12/+9 |
| * | allow specification of encapsulated protocol for flows; ok hshoexer | markus | 2006-03-31 | 1 | -8/+25 |
| * | allow specification of outer local ips in flows (SADB_EXT_ADDRESS_SRC); ok hshoexer, reyk | markus | 2006-03-30 | 1 | -1/+13 |
| * | add support for macros in ipsec.conf(5). some bits have already been |   reyk | 2006-03-22 | 1 | -4/+9 |
| * | noted by lint: include <string.h> instead of <strings.h>, add tow ARGSUSED1 | hshoexer | 2006-02-01 | 1 | -2/+4 |
| * | wrap long lines (no binary change) | reyk | 2006-01-17 | 1 | -2/+3 |
| * | add support for pre-shared keys with "ike esp" using the new keyword | reyk | 2006-01-16 | 1 | -1/+6 |
| * | more appropriate error messages; ok hshoexer | markus | 2005-12-06 | 1 | -3/+7 |
| * | ipip support: ip-in-ip w/o gif(4); ok hshoexer | markus | 2005-12-06 | 1 | -3/+3 |
| * | do not choke and dump core when printing bypass flows. noticed by jacob | hshoexer | 2005-12-01 | 1 | -5/+9 |
| * | handle that pfkey_ipsec_flush() can fail. | hshoexer | 2005-11-30 | 1 | -2/+3 |
| * | Fix memory leaks. From Andrey Matveev <evol at online dot ptt dot ru>, | hshoexer | 2005-11-21 | 1 | -1/+5 |
