Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | When system calls indicate an error they return -1, not some arbitrary | 2019-06-28 | 1 | -2/+2 | |
| | | | | | | value < 0. errno is only updated in this case. Change all (most?) callers of syscalls to follow this better, and let's see if this strictness helps us in the future. | ||||
* | <stdlib.h> is included, so do not need to cast result from | 2015-08-20 | 1 | -3/+3 | |
| | | | | | malloc, calloc, realloc* ok krw millert | ||||
* | When binding to addresses, ignore any IP address not in the current | 2011-02-03 | 1 | -2/+19 | |
| | | | | | | | | routing domain. While here, update comment on what the ioctl is used for (from sthen@). OK mikeb@, sthen@ | ||||
* | cleaning up my tree: trivial KNF and a comment fix. | 2009-01-28 | 1 | -2/+2 | |
| | |||||
* | do not listen on tentative (during DAD), duplicated (after DAD) or | 2008-10-21 | 1 | -3/+32 | |
| | | | | detached addresses. bind(2) will not allow this. ok hshoexer, fries | ||||
* | There's no point in checking ptr for NULL before doing free(ptr) | 2007-04-16 | 1 | -3/+2 | |
| | | | | | | since free(NULL) is just fine. ok hshoexer@ | ||||
* | Fix interop-issue with vpn peers that start reyking on port 4500 when | 2007-04-15 | 1 | -3/+9 | |
| | | | | | | | | | NAT-T is used. Solves problems with cisco and openswan. Tested by todd@ (cisco interop), ok ho@ Original fix with Stefan Roth (stefan dot roth at siemens dot com), thanks! | ||||
* | Big spelling cleanup, no binary change. From david@ | 2006-06-02 | 1 | -2/+2 | |
| | |||||
* | zap unused variable and silence gcc. | 2005-11-13 | 1 | -2/+2 | |
| | | | | | From Mike Belopuhov <mkb at crypt dot org dot ru> Thanks! | ||||
* | Do not touch LIST_* macro internals. | 2005-10-27 | 1 | -5/+8 | |
| | | | | with otto@, ok ho@ | ||||
* | some small knf, ok ho@ | 2005-10-25 | 1 | -4/+4 | |
| | |||||
* | read the information from the INADDR_ANY socket and do not loop if | 2005-08-25 | 1 | -15/+1 | |
| | | | | a new IP appears (cf udp.c, rev 1.74), ok ho@ hshoexer@ cloder@ deraadt@ | ||||
* | get rid of sysdep_sa_len | 2005-04-08 | 1 | -7/+6 | |
| | | | | ok cloder@ | ||||
* | USE_DEBUG is bye bye | 2005-04-08 | 1 | -3/+1 | |
| | |||||
* | nat-traversal always | 2005-04-08 | 1 | -11/+1 | |
| | |||||
* | Remove references to LINUX_IPSEC | 2005-04-08 | 1 | -7/+1 | |
| | |||||
* | remove unnecessary typecasts. | 2005-04-07 | 1 | -3/+3 | |
| | | | | ok ho@ | ||||
* | knf, ok cloder | 2005-04-06 | 1 | -16/+14 | |
| | |||||
* | Add -T flag to isakmpd to disable NAT-T support from the command line. | 2005-04-05 | 1 | -38/+45 | |
| | | | | | This lets binat setups work again without having to recompile isakmpd. OK ho, hshoexer. | ||||
* | spacing; ok cloder | 2005-04-04 | 1 | -4/+1 | |
| | |||||
* | No need for err.h. hshoexer@ ok | 2005-03-05 | 1 | -2/+1 | |
| | |||||
* | cleanup binding and cloning functions, use text2port(), correctly | 2005-03-04 | 1 | -29/+34 | |
| | | | | | | | determin the encap port. This makes udpencap fully useable on ports other than the default 4500. ok ho cloder | ||||
* | where possible, use bzero instead of memset | 2005-02-27 | 1 | -2/+2 | |
| | | | | ok cloder henning | ||||
* | Allow the Address, Network, or Netmask values of the <IPsec-ID> to be | 2004-12-14 | 1 | -2/+2 | |
| | | | | | | | | | | | | specified with an interface name (in which case the first address is used) or the keyword 'default' (in which case the address is selected based on the default route). eg: [roadwarrior-ip] ID-type= IPV4_ADDR Address= default ok ho@ hshoexer@ | ||||
* | compile cleanly with -Wsign-compare | 2004-09-20 | 1 | -3/+3 | |
| | | | | ok ho | ||||
* | spacing | 2004-08-10 | 1 | -3/+3 | |
| | |||||
* | spacing | 2004-08-08 | 1 | -7/+7 | |
| | |||||
* | Rewrite the transport reference count code to avoid leaks. | 2004-08-03 | 1 | -20/+27 | |
| | | | | hshoexer@ ok. | ||||
* | free() and close() in error path. | 2004-07-08 | 1 | -3/+12 | |
| | | | | ok ho@ | ||||
* | The NAT-T drafts suggest we should drop incoming messages arriving on | 2004-06-22 | 1 | -1/+15 | |
| | | | | the old port (500) after we've switched to the new one. | ||||
* | When switching from main to encap transport, copy dst port if | 2004-06-21 | 1 | -8/+13 | |
| | | | | translated (NAT). | ||||
* | Port floating (500->4500) for p1 and p2 exchanges. | 2004-06-21 | 1 | -57/+38 | |
| | |||||
* | NAT-Traversal for isakmpd. Work in progress... | 2004-06-20 | 1 | -0/+706 | |
hshoexer@ ok. |