From be37cecda17f44c9ef875b894b47d5239a8916a9 Mon Sep 17 00:00:00 2001 From: Damien Stuart Date: Tue, 5 Jan 2010 00:06:56 +0000 Subject: [PATCH] Updated changelog. Made the fwknop.man.asciidoc match the changes made to the fwknopd.8 manpage. git-svn-id: file:///home/mbr/svn/fwknop/trunk@188 510a4753-2344-4c79-9c09-4d669213fbeb --- ChangeLog | 16 ++++++++++++++++ doc/fwknop.man.asciidoc | 5 +++++ 2 files changed, 21 insertions(+) diff --git a/ChangeLog b/ChangeLog index 5f505d11..3c40350b 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,9 +1,25 @@ +2010-01-03 Damien Stuart + * Added access.conf file, parsing, and processing. + * Added a new acces.conf parameter, RESTRICT_PORTS for specifying 1 or more + proto/ports that are explicitly not allowed. + * Upon startup, fwknopd will now create the path to the configured run direcory + and/or the basename of the digest cache file if they do not already exist. + 2010-01-02 Michael Rash * Added --packet-limit to fwknopd so that the number of incoming candidate SPA packets can be limited from the command line. When this limit is reached (any packet that contains application layer data and passes the pcap filter is included in the count) then fwknopd exits. +2009-12-28 Damien Stuart + * Updated autoconf to look for local external executables like iptables, + ipfw, sendmail, mail, and sh in the PATH and set corresponding + definitions in config.h (only if the server is being built). + * Added ability to set the path to the executables listed above via + "--with-xx=" arguments to configure. The arg will force the + given value whether it exists or not (though it will issue a warning + if the path does not exist). + 2009-11-01 Michael Rash * (Legacy code) Applied patch from Jonthan Bennett to support the usage of the http_proxy environmental variable for sending SPA packets through an diff --git a/doc/fwknop.man.asciidoc b/doc/fwknop.man.asciidoc index 2fd43898..70d99830 100644 --- a/doc/fwknop.man.asciidoc +++ b/doc/fwknop.man.asciidoc @@ -164,6 +164,11 @@ SPA OPTIONS a GPG recipient (see *--gpg-recipient* along with other GPG-related options below). +*-H, --http-proxy*='':: + Specify an HTTP *fwknopd* client will use to send the SPA packet through. + Using this option will automatically set the SPA packet transmission mode + (usually set via the *--server-proto* argument) to ``http''. + *-m, --digest-type*='':: Specify the message digest algorithm to use in the SPA data. Choices are: *md5*, *sha1*, *sha256* (the default), *sha384*, and *sha512*.