------------------------------------------------------------------------
r592 | mbr | 2006-11-05 17:06:03 -0500 (Sun, 05 Nov 2006) | 5 lines
Changed paths:
   M /fwknop/trunk/fwknopd

Changed replay attack detection model back to use MD5 sum of decrypted data.  The
reason is that an attacker can append data to original encrypted packet data, and
it still decrypts properly.  This would allow an attacker to just pound some bogus
data onto the end of an SPA packet in order to avoid replay detection.

------------------------------------------------------------------------
r591 | mbr | 2006-11-05 15:55:00 -0500 (Sun, 05 Nov 2006) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknop

added --Show-last-cmd and --Show-host-cmd args to fwknop
------------------------------------------------------------------------
r590 | mbr | 2006-11-05 15:38:15 -0500 (Sun, 05 Nov 2006) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop

added source IP to command string
------------------------------------------------------------------------
r589 | mbr | 2006-11-05 15:38:00 -0500 (Sun, 05 Nov 2006) | 12 lines
Changed paths:
   M /fwknop/trunk/fwknopd

- Bugfix for access hashes accumluating when multiple ports are requested
  to be opened by a client.
- Bugfix so that the MD5 sum for an SPA packet is not examined for each
  SOURCE block.  This fixes a problem where an SPA packet could appear to
  be replayed if multiple SOURCE blocks are defined in
  /etc/fwknop/access.conf.
- Refactored main SPA access loop so that it is clearer how and when SPA
  clients are granted access.
- Added source IP address to command string in the SPA packet so that
  the REQUIRE_SOURCE_ADDRESS criteria can be applied by the fwknopd
  server.

------------------------------------------------------------------------
r588 | mbr | 2006-11-05 15:36:25 -0500 (Sun, 05 Nov 2006) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog

started on 1.0 release notes
------------------------------------------------------------------------
r587 | mbr | 2006-11-04 15:46:07 -0500 (Sat, 04 Nov 2006) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop

added file Revision tag expansion
------------------------------------------------------------------------
r586 | mbr | 2006-11-04 15:45:49 -0500 (Sat, 04 Nov 2006) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop

added file revision number
------------------------------------------------------------------------
r585 | mbr | 2006-11-04 15:44:27 -0500 (Sat, 04 Nov 2006) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

minor revision num bugfix
------------------------------------------------------------------------
r584 | mbr | 2006-11-04 15:43:28 -0500 (Sat, 04 Nov 2006) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

added file Revision tag expansion
------------------------------------------------------------------------
r583 | mbr | 2006-11-04 15:43:01 -0500 (Sat, 04 Nov 2006) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

added file revision number
------------------------------------------------------------------------
r582 | mbr | 2006-10-30 17:14:22 -0500 (Mon, 30 Oct 2006) | 1 line
Changed paths:
   M /fwknop/trunk/packaging/fwknop.spec

bugfix to install the List::MoreUtils perl module
------------------------------------------------------------------------
r581 | mbr | 2006-10-30 16:59:45 -0500 (Mon, 30 Oct 2006) | 1 line
Changed paths:
   M /fwknop/trunk/TODO

more TODO additions
------------------------------------------------------------------------
r580 | mbr | 2006-10-30 16:58:20 -0500 (Mon, 30 Oct 2006) | 1 line
Changed paths:
   M /fwknop/trunk/IPTables-ChainMgr/lib/IPTables/ChainMgr.pm

bugfix to make sure that the from_chain cannot equal the to_chain
------------------------------------------------------------------------
r579 | mbr | 2006-10-30 16:57:35 -0500 (Mon, 30 Oct 2006) | 4 lines
Changed paths:
   M /fwknop/trunk/fwknopd

-Better handling of GnuPG key identifier strings (they can now contain spaces,
and syslog messages wrap the identifiers with double quotes).
-Added code to make sure the IPT_AUTO_CHAIN from_chain does not equal the to_chain.

------------------------------------------------------------------------
r578 | mbr | 2006-10-30 16:47:30 -0500 (Mon, 30 Oct 2006) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop

better debugging output to show packet fields before being base64 encoded
------------------------------------------------------------------------
r577 | mbr | 2006-10-17 16:51:04 -0400 (Tue, 17 Oct 2006) | 1 line
Changed paths:
   M /fwknop/trunk/TODO

updated TODO
------------------------------------------------------------------------
r576 | mbr | 2006-10-17 15:22:19 -0400 (Tue, 17 Oct 2006) | 1 line
Changed paths:
   M /fwknop/trunk/patches/openssh-4.2p1_SPA.patch

added Id expansion
------------------------------------------------------------------------
r575 | mbr | 2006-10-17 15:22:10 -0400 (Tue, 17 Oct 2006) | 1 line
Changed paths:
   M /fwknop/trunk/patches/openssh-4.3p2_SPA.patch

bugfix to include the spa.h file
------------------------------------------------------------------------
