------------------------------------------------------------------------
r1051 | mbr | 2008-04-05 22:55:25 -0400 (Sat, 05 Apr 2008) | 1 line
Changed paths:
   M /fwknop/tags/fwknop-1.9.3/fwknopd

merged in iptables SNAT fix for parsed ipt config vars from fwknop.conf
------------------------------------------------------------------------
r1049 | mbr | 2008-04-05 00:11:47 -0400 (Sat, 05 Apr 2008) | 1 line
Changed paths:
   A /fwknop/tags/fwknop-1.9.3 (from /fwknop/branches/fwknop-1.9.3:1048)

tagged fwknop-1.9.3 release
------------------------------------------------------------------------
r1048 | mbr | 2008-04-05 00:11:13 -0400 (Sat, 05 Apr 2008) | 1 line
Changed paths:
   A /fwknop/branches/fwknop-1.9.3/ChangeLog.svn

Added ChangeLog.svn file to track -r 1047:1031
------------------------------------------------------------------------
r1047 | mbr | 2008-04-05 00:04:23 -0400 (Sat, 05 Apr 2008) | 1 line
Changed paths:
   A /fwknop/branches/fwknop-1.9.3 (from /fwknop/trunk:1046)

created fwknop-1.9.3 branch
------------------------------------------------------------------------
r1046 | mbr | 2008-04-05 00:03:29 -0400 (Sat, 05 Apr 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/packaging/fwknop.spec
   M /fwknop/trunk/test/fwknop_test.pl

version 1.9.3
------------------------------------------------------------------------
r1045 | mbr | 2008-03-30 15:51:03 -0400 (Sun, 30 Mar 2008) | 3 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknop

- Added hex_dump() feature for fwknop client so that raw encrypted SPA
packet data can be displayed in --verbose mode.

------------------------------------------------------------------------
r1044 | mbr | 2008-03-30 15:46:47 -0400 (Sun, 30 Mar 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog

SNAT blurb update
------------------------------------------------------------------------
r1043 | mbr | 2008-03-30 15:42:23 -0400 (Sun, 30 Mar 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop.conf

minor typo fix
------------------------------------------------------------------------
r1042 | mbr | 2008-03-30 15:42:06 -0400 (Sun, 30 Mar 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop.conf
   M /fwknop/trunk/fwknopd

updated to only apply SNAT rules if ENABLE_IPT_SNAT is enabled, since usually internal systems will have a route back out through the default gateway
------------------------------------------------------------------------
r1041 | mbr | 2008-03-24 22:20:37 -0400 (Mon, 24 Mar 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog

minor spelling fix
------------------------------------------------------------------------
r1039 | mbr | 2008-03-24 22:17:24 -0400 (Mon, 24 Mar 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

1.9.3-pre1
------------------------------------------------------------------------
r1038 | mbr | 2008-03-24 22:16:44 -0400 (Mon, 24 Mar 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog

more 1.9.3 additions
------------------------------------------------------------------------
r1037 | mbr | 2008-03-24 22:15:35 -0400 (Mon, 24 Mar 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/knoptm

Id + Revision tag expansion
------------------------------------------------------------------------
r1036 | mbr | 2008-03-24 22:15:03 -0400 (Mon, 24 Mar 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

Id + Revision tag expansion
------------------------------------------------------------------------
r1035 | mbr | 2008-03-24 22:11:34 -0400 (Mon, 24 Mar 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

Id + Revision tag expansion test
------------------------------------------------------------------------
r1034 | mbr | 2008-03-24 21:49:34 -0400 (Mon, 24 Mar 2008) | 16 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/TODO
   M /fwknop/trunk/fwknop.conf
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/test/conf/blacklist_fwknop.conf
   M /fwknop/trunk/test/conf/default_fwknop.conf
   M /fwknop/trunk/test/conf/forward_chain_fwknop.conf
   M /fwknop/trunk/test/conf/md5_fwknop.conf
   M /fwknop/trunk/test/conf/no_promisc_fwknop.conf
   M /fwknop/trunk/test/conf/output_chain_fwknop.conf
   M /fwknop/trunk/test/conf/pcap_file_fwknop.conf
   M /fwknop/trunk/test/conf/sha1_fwknop.conf
   M /fwknop/trunk/test/conf/sha256_fwknop.conf
   M /fwknop/trunk/test/conf/spa_aging_fwknop.conf

- Added MASQUERADE and SNAT support to compliment inbound DNAT connections
for SPA packets that request --Forward-access to internal systems.  This
functionality is only enabled when ENABLE_IPT_FORWARDING is set, and is
governed by two new variables IPT_MASQUERADE_ACCESS and IPT_SNAT_ACCESS
which define the iptables interface to creating SNAT rules.  By default,
the MASQUERADE target is used because this means that the external IP
does not have to be manually defined.  However, is ENABLE_IPT_SNAT is
enabled, then the IPT_SNAT_ACCESS definitions are used, and the external
SNAT IP is defined by the SNAT_TRANSLATE_IP variable.
- When ENABLE_IPT_FORWARDING is set, added a check for the value of the
/proc/sys/net/ipv4/ip_forward file to ensure that the local system
allows packets to be forwarded.  Unless ENABLE_PROC_IP_FORWARD is
disabled, then fwknopd will automatically set the ip_forward file to "1"
if it is set to "0" (again, only if ENABLE_IPT_FORWARDING is enabled).
- Minor bugfix to remove sys_log() call in legacy port knocking mode.

------------------------------------------------------------------------
r1033 | mbr | 2008-03-24 19:06:40 -0400 (Mon, 24 Mar 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

updated to always reference the default_fwknop.conf file for fwknopd commands control commands (--fw-list, etc.)
------------------------------------------------------------------------
r1032 | mbr | 2008-03-24 19:05:41 -0400 (Mon, 24 Mar 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop.h

removed unused check_import_config() function
------------------------------------------------------------------------
