Michael Rash bc58b3a15f Added chain_exists() check to fwknopd SPA rule creation ...

Added chain_exists() check to SPA rule creation so that if any
of the fwknop chains are deleted out from under fwknopd they will be
recreated on the fly.  This mitigates scenarios where fwknopd might be
started before a system level firewall policy is applied due to init
script ordering, or if an iptables policy is re-applied without
restarting fwknopd.

2012-11-12 21:48:26 -05:00

..

access.c

[server] GPG_ALLOW_NO_PW + no KEY bug fix

2012-10-02 23:20:47 -04:00

access.conf

Per Franck Joncourt - Corrected misspelled word in fwknopd man page and access.conf.

2010-07-16 20:14:35 +00:00

access.conf.inst

[server] Preserve any existing config files in /etc/fwknop/

2012-08-13 22:39:03 -04:00

access.h

(Fernando Arnaboldi, IOActive) Found and fixed several DoS/code execution vulns for authenticated clients

2012-08-24 22:12:19 -04:00

cmd_opts.h

[server] Added '--pcap-file <file>' option

2012-11-08 21:33:23 -05:00

config_init.c

[server] Added '--pcap-file <file>' option

2012-11-08 21:33:23 -05:00

config_init.h

PCAP_LOOP_SLEEP bug fix to 1/10th of a second

2012-07-23 21:13:30 -04:00

extcmd.c

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

extcmd.h

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

fw_util_ipf.c

Added FORCE_NAT mode to the access.conf file

2011-11-30 20:51:19 -05:00

fw_util_ipf.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

fw_util_ipfw.c

[server] Added FLUSH_IPFW_AT_INIT and FLUSH_IPFW_AT_EXIT

2012-08-10 21:48:02 -04:00

fw_util_ipfw.h

Added tweaks to ipfw command for Mac OS X

2012-07-14 18:22:42 -04:00

fw_util_iptables.c

Added chain_exists() check to fwknopd SPA rule creation

2012-11-12 21:48:26 -05:00

fw_util_iptables.h

Added chain_exists() check to fwknopd SPA rule creation

2012-11-12 21:48:26 -05:00

fw_util_pf.c

updated PF anchor check to not rely on listing the PF policy

2012-05-28 14:19:52 -04:00

fw_util_pf.h

updated PF anchor check to not rely on listing the PF policy

2012-05-28 14:19:52 -04:00

fw_util.c

Minor restructuring to suppress compiler "defined but not used warnings"

2011-08-20 12:34:57 -04:00

fw_util.h

[server] iptables 'comment' match check

2012-08-12 15:44:13 -04:00

fwknopd_common.h

[server] Added '--pcap-file <file>' option

2012-11-08 21:33:23 -05:00

fwknopd_errors.c

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

fwknopd_errors.h

added DNAT mode tests, minor memory leak fix in NAT mode, added fwknopd check for ENABLE_IPT_FORWARDING variable before attempting NAT access

2011-11-22 22:13:27 -05:00

fwknopd.8.in

minor wording update netfilter -> iptables

2011-10-13 20:59:30 -04:00

fwknopd.c

verify_file_perms_ownership() to just return if the file doesn't exist

2012-09-01 21:55:52 -04:00

fwknopd.conf

[server] Added '--pcap-file <file>' option

2012-11-08 21:33:23 -05:00

fwknopd.conf.inst

[server] Preserve any existing config files in /etc/fwknop/

2012-08-13 22:39:03 -04:00

fwknopd.h

Minor PID string length fix

2011-10-18 21:28:38 -04:00

incoming_spa.c

[server] Added '--pcap-file <file>' option

2012-11-08 21:33:23 -05:00

incoming_spa.h

Added access stanza expiration feature, multiple access stanza bug fix

2011-11-28 22:03:21 -05:00

log_msg.c

This commit fixes two memory leaks and adds a common exit function.

2011-11-10 22:33:32 -05:00

log_msg.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

Makefile.am

[server] Preserve any existing config files in /etc/fwknop/

2012-08-13 22:39:03 -04:00

pcap_capture.c

[server] Added '--pcap-file <file>' option

2012-11-08 21:33:23 -05:00

pcap_capture.h

Added tweaks to ipfw command for Mac OS X

2012-07-14 18:22:42 -04:00

process_packet.c

Better IP spoofing support (udpraw and icmp)

2012-10-03 22:56:10 -04:00

process_packet.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

replay_cache.c

Patch from Franck Joncourt for setting permissions via open()

2012-10-23 21:47:56 -04:00

replay_cache.h

Only cache replay digests for SPA packets that decrypt

2012-07-08 08:36:30 -04:00

sig_handler.c

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

sig_handler.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

tcp_server.c

Refactored configure.ac to use a custom macro for compiler flag checks.

2011-12-29 14:20:18 -05:00

tcp_server.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

utils.c

Patch from Franck Joncourt for setting permissions via open()

2012-10-23 21:47:56 -04:00

utils.h

Patch from Franck Joncourt for setting permissions via open()

2012-10-23 21:47:56 -04:00