Michael Rash b0a4c045e6 Merge remote-tracking branch 'fjoncourt/master' into hmac_support ...

This merges in code from Franck Joncourt to ensure that duplicate iptables
rules are not created for SPA packets that are themselves different but arrive
at the same time and that request exactly the same access.  This is done by
using the 'iptables -C' functionality to determine whether a duplicate rule
already exists before adding a new one.

2013-01-20 15:22:47 -05:00

..

access.c

merged in fwknop-2.0.4 changes

2013-01-18 17:25:16 -05:00

access.conf

Per Franck Joncourt - Corrected misspelled word in fwknopd man page and access.conf.

2010-07-16 20:14:35 +00:00

access.conf.inst

[server] Preserve any existing config files in /etc/fwknop/

2012-08-13 22:39:03 -04:00

access.h

(Fernando Arnaboldi, IOActive) Found and fixed several DoS/code execution vulns for authenticated clients

2012-08-24 22:12:19 -04:00

cmd_opts.h

[server] Added '--pcap-file <file>' option

2012-11-08 21:33:23 -05:00

config_init.c

[server] Added '--pcap-file <file>' option

2012-11-08 21:33:23 -05:00

config_init.h

PCAP_LOOP_SLEEP bug fix to 1/10th of a second

2012-07-23 21:13:30 -04:00

extcmd.c

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

extcmd.h

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

fw_util_ipf.c

Added FORCE_NAT mode to the access.conf file

2011-11-30 20:51:19 -05:00

fw_util_ipf.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

fw_util_ipfw.c

[server] Added FLUSH_IPFW_AT_INIT and FLUSH_IPFW_AT_EXIT

2012-08-10 21:48:02 -04:00

fw_util_ipfw.h

Added tweaks to ipfw command for Mac OS X

2012-07-14 18:22:42 -04:00

fw_util_iptables.c

* Avoid duplicate rules with the same timestamp.

2013-01-17 21:46:13 +01:00

fw_util_iptables.h

* Avoid duplicate rules with the same timestamp.

2013-01-17 21:46:13 +01:00

fw_util_pf.c

updated PF anchor check to not rely on listing the PF policy

2012-05-28 14:19:52 -04:00

fw_util_pf.h

updated PF anchor check to not rely on listing the PF policy

2012-05-28 14:19:52 -04:00

fw_util.c

Minor restructuring to suppress compiler "defined but not used warnings"

2011-08-20 12:34:57 -04:00

fw_util.h

[server] iptables 'comment' match check

2012-08-12 15:44:13 -04:00

fwknopd_common.h

merged in fwknop-2.0.4 changes

2013-01-18 17:25:16 -05:00

fwknopd_errors.c

added 'const' to function prototype vars where possible

2011-10-25 21:00:40 -04:00

fwknopd_errors.h

added DNAT mode tests, minor memory leak fix in NAT mode, added fwknopd check for ENABLE_IPT_FORWARDING variable before attempting NAT access

2011-11-22 22:13:27 -05:00

fwknopd.8.in

minor wording update netfilter -> iptables

2011-10-13 20:59:30 -04:00

fwknopd.c

verify_file_perms_ownership() to just return if the file doesn't exist

2012-09-01 21:55:52 -04:00

fwknopd.conf

[server] Added '--pcap-file <file>' option

2012-11-08 21:33:23 -05:00

fwknopd.conf.inst

[server] Preserve any existing config files in /etc/fwknop/

2012-08-13 22:39:03 -04:00

fwknopd.h

Minor PID string length fix

2011-10-18 21:28:38 -04:00

incoming_spa.c

merged in fwknop-2.0.4 changes

2013-01-18 17:25:16 -05:00

incoming_spa.h

Added access stanza expiration feature, multiple access stanza bug fix

2011-11-28 22:03:21 -05:00

log_msg.c

This commit fixes two memory leaks and adds a common exit function.

2011-11-10 22:33:32 -05:00

log_msg.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

Makefile.am

merged in the fixes_for_2.0.4 branch

2013-01-19 18:36:52 -05:00

pcap_capture.c

[server] Ignore pcap non-blocking setting in --pcap-file mode

2012-11-27 22:54:55 -05:00

pcap_capture.h

Added tweaks to ipfw command for Mac OS X

2012-07-14 18:22:42 -04:00

process_packet.c

Better IP spoofing support (udpraw and icmp)

2012-10-03 22:56:10 -04:00

process_packet.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

replay_cache.c

Patch from Franck Joncourt for setting permissions via open()

2012-10-23 21:47:56 -04:00

replay_cache.h

Only cache replay digests for SPA packets that decrypt

2012-07-08 08:36:30 -04:00

sig_handler.c

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

sig_handler.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

tcp_server.c

Refactored configure.ac to use a custom macro for compiler flag checks.

2011-12-29 14:20:18 -05:00

tcp_server.h

Removed legacy $Id$ tags from svn

2011-06-18 20:53:40 -04:00

utils.c

merged in fwknop-2.0.4 changes

2013-01-18 17:25:16 -05:00

utils.h

merged in fwknop-2.0.4 changes

2013-01-18 17:25:16 -05:00