Preserve owner and permissions of original /etc/resolv.conf.Ensure that new /etc/resolv.conf isn't group or world writable.
Print and check INTERNAL_NETMASK4.
Make the handling of NAT-T SPD entries automatic.
Ensure that the determination of the default gateway and the correspondinginterface don't get confused by multiple, possibly non-IPv4 default routes.Bring the NetBSD case of deleting the VPN route
Ensure that the determination of the default gateway and the correspondinginterface don't get confused by multiple, possibly non-IPv4 default routes.Bring the NetBSD case of deleting the VPN routes and address in line withthe Linux case and delete the address after deleting the VPN routes.
show more ...
update the scripts for wrorking around routing problems on NetBSD
Migration of ipsec-tools to NetBSD CVS part 2: resolving the import conflicts.Since we previously had a release branch and we import here the HEAD of CVS,let's assume all local changes are to be du
Migration of ipsec-tools to NetBSD CVS part 2: resolving the import conflicts.Since we previously had a release branch and we import here the HEAD of CVS,let's assume all local changes are to be dumped. Local patches should havebeen propagated upstream, anyway.
Resolve conflicts caused by recent ipsec-tools-0.6.1rc1 import by preferingthe newer software. Some useful local change might have been overwritten,we'll take care of this soon.
Add comments on how to use the hook scripts without NAT-T
Update sample config file to higher security settings
More NAT-T fixes for the situation where racoon acts as a VPN clientFlush SA and generated SP on DPD timeout and deletion payloads
Improve English in comments.
Grammar fixes & improvements.
Grammar improvements.
kerberos -> Kerberos.
Fix typo.
Import ipsec-tools 0.6 branch as of 2005/02/23. News from last imported versionaccording to ipsec-tools' ChangeLog:2005-02-23 Emmanuel Dreyfus <manu@netbsd.org> * configure.ac, src/racoo
Import ipsec-tools 0.6 branch as of 2005/02/23. News from last imported versionaccording to ipsec-tools' ChangeLog:2005-02-23 Emmanuel Dreyfus <manu@netbsd.org> * configure.ac, src/racoon/{Makefile.am|crypto_openssl.c}: optionnal support for patented algorithms: IDEA and RC5. * src/racoon/{isakmp_xauth.c|main.c}: don't initialize RADIUS if it is not required in the configuration * src/racoon/isakmp.c: do not reject addresses for which kernel refused UDP encapsulation, they can still be used for non NAT-T traffic (eg: NAT-T enabled racoon on non NAT-T enabled kernel)2005-02-18 Emmanuel Dreyfus <manu@netbsd.org> * src/racoon/{main.c|eaytest.c|plairsa-gen.c} src/setkey/setkey.c: don't use fuzzy paths for package_version.h2005-02-18 Yvan Vanhullebus <vanhu@free.fr> * src/racoon/isakmp_inf.c: Purge generated SPDs when getting a related DELETE_SA * src/racoon/pfkey.c: do NOT unbindph12() when SA acquire2005-02-17 Emmanuel Dreyfus <manu@netbsd.org> From Fred Senault <fred.letter@lacave.net> * src/racoon/remoteconf.c: Fix a bug in script init2005-02-17 Yvan Vanhullebus <vanhu@free.fr> * src/racoon/ipsec_doi.c: Workaround for phase1 lifetime checks2005-02-15 Michal Ludvig <michal@logix.cz> * configure.ac: Changed --enable-natt_NN to --enable-natt-versions=NN,NN
Remove .cvsignore files commtted by mistake
Import ipsec-tools (tag ipsec-tools-0_6-base in ipsec-tools CVS)ipsec-tools is a fork from KAME racoon/libipsec/setkey, with manyenhancements.