------------------------------------------------------------------------
r1354 | mbr | 2008-11-13 23:01:02 -0500 (Thu, 13 Nov 2008) | 1 line
Changed paths:
   A /fwknop/branches/fwknop-1.9.9 (from /fwknop/trunk:1353)

created fwknop-1.9.9 branch
------------------------------------------------------------------------
r1353 | mbr | 2008-11-13 22:56:46 -0500 (Thu, 13 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop_serv
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/packaging/fwknop-nodeps.spec
   M /fwknop/trunk/packaging/fwknop.spec
   M /fwknop/trunk/test/fwknop_test.pl

bumped version to 1.9.9
------------------------------------------------------------------------
r1352 | mbr | 2008-11-13 22:49:45 -0500 (Thu, 13 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop

minor wording update to make it clear when an SPA packet is sent over an established TCP connection (suggested by Alexander Perlis)
------------------------------------------------------------------------
r1351 | mbr | 2008-11-13 22:24:32 -0500 (Thu, 13 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop.8

wording update to make it clear that fwknop creates a TCP connection when --TCP-sock is used
------------------------------------------------------------------------
r1349 | mbr | 2008-11-11 23:05:23 -0500 (Tue, 11 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop_serv
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

updated to version 1.9.9-pre9
------------------------------------------------------------------------
r1348 | mbr | 2008-11-11 23:04:35 -0500 (Tue, 11 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/CREDITS

knoptm update for Franck
------------------------------------------------------------------------
r1347 | mbr | 2008-11-11 23:04:28 -0500 (Tue, 11 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/knoptm.8

minor wording fix
------------------------------------------------------------------------
r1346 | mbr | 2008-11-11 23:03:03 -0500 (Tue, 11 Nov 2008) | 4 lines
Changed paths:
   M /fwknop/trunk/CREDITS
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknop.conf
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/test/conf/any_interface_fwknop.conf
   M /fwknop/trunk/test/conf/blacklist_dashA_IP_fwknop.conf
   M /fwknop/trunk/test/conf/blacklist_fwknop.conf
   M /fwknop/trunk/test/conf/default_fwknop.conf
   M /fwknop/trunk/test/conf/filter_62203_fwknop.conf
   M /fwknop/trunk/test/conf/forward_chain_fwknop.conf
   M /fwknop/trunk/test/conf/gpg2_fwknop.conf
   M /fwknop/trunk/test/conf/ipt_sleep_fwknop.conf
   M /fwknop/trunk/test/conf/md5_fwknop.conf
   M /fwknop/trunk/test/conf/no_local_nat_fwknop.conf
   M /fwknop/trunk/test/conf/no_promisc_fwknop.conf
   M /fwknop/trunk/test/conf/output_chain_fwknop.conf
   M /fwknop/trunk/test/conf/pcap_file_fwknop.conf
   M /fwknop/trunk/test/conf/pk_fwknop.conf
   M /fwknop/trunk/test/conf/popen_fwknop.conf
   M /fwknop/trunk/test/conf/rand_port_fwknop.conf
   M /fwknop/trunk/test/conf/sha1_fwknop.conf
   M /fwknop/trunk/test/conf/sha256_fwknop.conf
   M /fwknop/trunk/test/conf/spa_aging_fwknop.conf
   M /fwknop/trunk/test/conf/system_fwknop.conf

- Added code to prefer the usage of the /usr/sbin/sendmail binary to send
email alerts before falling back to the mail binary (suggested by
Alexander Perlis).

------------------------------------------------------------------------
r1345 | mbr | 2008-11-11 21:49:08 -0500 (Tue, 11 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/knoptm.8

applied knoptm(8) man page update from Franck Joncourt to add discussion of knoptm command line options
------------------------------------------------------------------------
r1343 | mbr | 2008-11-09 14:47:16 -0500 (Sun, 09 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop_serv
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

bumped version to 1.9.9-pre8
------------------------------------------------------------------------
r1342 | mbr | 2008-11-09 14:46:15 -0500 (Sun, 09 Nov 2008) | 1 line
Changed paths:
   A /fwknop/trunk/test/conf/external_cmd_no_dash_A_access.conf

added conf/external_cmd_no_dash_A_access.conf
------------------------------------------------------------------------
r1341 | mbr | 2008-11-09 14:44:46 -0500 (Sun, 09 Nov 2008) | 5 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/test/fwknop_test.pl

(Test suite): Added the ability to collect output from knoptm to see
when requests are received from fwknopd and when rules are added and
removed.
(Test suite): Better startup/shutdown with fwknop processes stopped at both.

------------------------------------------------------------------------
r1340 | mbr | 2008-11-09 01:17:12 -0500 (Sun, 09 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/test/conf/external_cmd_access.conf
   A /fwknop/trunk/test/conf/external_cmd_no_open_ports_access.conf
   M /fwknop/trunk/test/fwknop_test.pl

added the ability in fwknopd to collect debug output from knoptm via a file, added tests for no OPEN_PORTS variable in the test suite
------------------------------------------------------------------------
r1339 | mbr | 2008-11-08 21:23:05 -0500 (Sat, 08 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

code clean to consolidate fw sleep() functions
------------------------------------------------------------------------
r1338 | mbr | 2008-11-08 21:17:27 -0500 (Sat, 08 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

updated to not require OPEN_PORTS for a SOURCE stanza if we're running in external_cmd mode
------------------------------------------------------------------------
r1337 | mbr | 2008-11-06 01:07:35 -0500 (Thu, 06 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/CREDITS
   M /fwknop/trunk/fwknopd

bug fix to not start the fwknopd daemons under --fw-list when FIREWALL_TYPE is set to 'external_cmd'
------------------------------------------------------------------------
r1336 | mbr | 2008-11-06 00:57:15 -0500 (Thu, 06 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/CREDITS
   M /fwknop/trunk/fwknopd

bug fix to allow SPA packets that do not specify a list of ports still results in external commands being executed in EXTERNAL_* mode
------------------------------------------------------------------------
r1335 | mbr | 2008-11-06 00:39:57 -0500 (Thu, 06 Nov 2008) | 5 lines
Changed paths:
   M /fwknop/trunk/CREDITS
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/test/fwknop_test.pl

- Bug fix for the fwknop client in symmetric key mode where the terminal
would not be taken out of 'noecho' mode if a password less than 8
characters long is provided.  Previous to this fix, it was necessary to
blindly type 'reset'.  (Reported by Alexander Perlis.)

------------------------------------------------------------------------
r1333 | mbr | 2008-11-04 23:45:00 -0500 (Tue, 04 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop_serv
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

bumped version to 1.9.9-pre7
------------------------------------------------------------------------
r1332 | mbr | 2008-11-04 23:44:44 -0500 (Tue, 04 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/knoptm

bug fix for applying variable expansion to EXTERNAL_* vars
------------------------------------------------------------------------
r1330 | mbr | 2008-11-04 23:28:39 -0500 (Tue, 04 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop_serv
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

bumped version to 1.9.9-pre6
------------------------------------------------------------------------
r1329 | mbr | 2008-11-04 21:54:53 -0500 (Tue, 04 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/test/fwknop_test.pl

bug fix for EXTERNAL_* vars and variable expansion (reported by Alexander Perlis), updated fwknopd to accept access.conf vars without trailing colon chars
------------------------------------------------------------------------
r1327 | mbr | 2008-11-02 23:26:07 -0500 (Sun, 02 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop_serv
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

bumped version to 1.9.9-pre5
------------------------------------------------------------------------
r1326 | mbr | 2008-11-02 22:54:20 -0500 (Sun, 02 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop.conf
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/test/conf/any_interface_fwknop.conf
   M /fwknop/trunk/test/conf/blacklist_dashA_IP_fwknop.conf
   M /fwknop/trunk/test/conf/blacklist_fwknop.conf
   M /fwknop/trunk/test/conf/default_fwknop.conf
   A /fwknop/trunk/test/conf/external_cmd_access.conf
   M /fwknop/trunk/test/conf/filter_62203_fwknop.conf
   M /fwknop/trunk/test/conf/forward_chain_fwknop.conf
   M /fwknop/trunk/test/conf/gpg2_fwknop.conf
   M /fwknop/trunk/test/conf/ipt_sleep_fwknop.conf
   M /fwknop/trunk/test/conf/md5_fwknop.conf
   M /fwknop/trunk/test/conf/no_local_nat_fwknop.conf
   M /fwknop/trunk/test/conf/no_promisc_fwknop.conf
   M /fwknop/trunk/test/conf/output_chain_fwknop.conf
   M /fwknop/trunk/test/conf/pcap_file_fwknop.conf
   M /fwknop/trunk/test/conf/pk_fwknop.conf
   M /fwknop/trunk/test/conf/popen_fwknop.conf
   M /fwknop/trunk/test/conf/rand_port_fwknop.conf
   M /fwknop/trunk/test/conf/sha1_fwknop.conf
   M /fwknop/trunk/test/conf/sha256_fwknop.conf
   M /fwknop/trunk/test/conf/spa_aging_fwknop.conf
   M /fwknop/trunk/test/conf/system_fwknop.conf
   M /fwknop/trunk/test/fwknop_test.pl

bug fix in external command mode to send the command to knoptm base64 encoded, added ENABLE_EXT_CMD_PREFIX and EXT_CMD_PREFIX to control naming of substitution vars, added the ability to test the external command mode (test suite).
------------------------------------------------------------------------
r1325 | mbr | 2008-11-02 12:47:47 -0500 (Sun, 02 Nov 2008) | 25 lines
Changed paths:
   M /fwknop/trunk/CREDITS
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknop.conf
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/test/conf/any_interface_fwknop.conf
   M /fwknop/trunk/test/conf/blacklist_dashA_IP_fwknop.conf
   M /fwknop/trunk/test/conf/blacklist_fwknop.conf
   M /fwknop/trunk/test/conf/default_fwknop.conf
   M /fwknop/trunk/test/conf/filter_62203_fwknop.conf
   M /fwknop/trunk/test/conf/forward_chain_fwknop.conf
   M /fwknop/trunk/test/conf/gpg2_fwknop.conf
   M /fwknop/trunk/test/conf/ipt_sleep_fwknop.conf
   M /fwknop/trunk/test/conf/md5_fwknop.conf
   M /fwknop/trunk/test/conf/no_local_nat_fwknop.conf
   M /fwknop/trunk/test/conf/no_promisc_fwknop.conf
   M /fwknop/trunk/test/conf/output_chain_fwknop.conf
   M /fwknop/trunk/test/conf/pcap_file_fwknop.conf
   M /fwknop/trunk/test/conf/pk_fwknop.conf
   M /fwknop/trunk/test/conf/popen_fwknop.conf
   M /fwknop/trunk/test/conf/rand_port_fwknop.conf
   M /fwknop/trunk/test/conf/sha1_fwknop.conf
   M /fwknop/trunk/test/conf/sha256_fwknop.conf
   M /fwknop/trunk/test/conf/spa_aging_fwknop.conf
   M /fwknop/trunk/test/conf/system_fwknop.conf

- Added support for interfacing fwknop with third party software through
  the addition of three new variables in the access.conf file (or set
  globally in the fwknop.conf file): EXTERNAL_CMD_OPEN, 
  EXTERNAL_CMD_CLOSE, and EXTERNAL_CMD_ALARM.
        The "open" and "close" commands might be manually supplied firewall
  commands, and both support variable substitution of any of the variables
  in the access.conf file with "$VAR".  Also, three special variables are
  supported: $SRC, $PORT, and $PROTO, which are derived from actual values
  from within valid SPA packets (as opposed to $SOURCE from access.conf
  which may contain a list of networks instead of a single IP address).
    Here are some examples:
    - Execute a specific iptables command on behalf of the source IP
      in a valid SPA packet to add a new ACCEPT rule, and execute another
      command (to delete the same rule after a timeout):
            EXTERNAL_CMD_OPEN       iptables -A INPUT -s $SRC -j ACCEPT
            EXTERNAL_CMD_CLOSE      iptables -D INPUT -s $SRC -j ACCEPT
    - Execute a custom binary with the SOURCE and OPEN_PORTS variables from
      the access.conf file as input on the command line, and after a
      timeout execute a different program but use the real SPA source IP:
            EXTERNAL_CMD_OPEN       /path/someprog $SOURCE $OPEN_PORTS
            EXTERNAL_CMD_OPEN       /path/otherprog $SRC

This change was suggested by Alexander Perlis on the fwknop mailing list.


------------------------------------------------------------------------
r1324 | mbr | 2008-11-02 08:29:13 -0500 (Sun, 02 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/knoptm

minor syntax bug fix
------------------------------------------------------------------------
r1323 | mbr | 2008-11-02 08:28:49 -0500 (Sun, 02 Nov 2008) | 1 line
Changed paths:
   M /fwknop/trunk/knoptm

bug fix to include signal handler for iptables object, bug fix to only create an iptables object on systems running iptables
------------------------------------------------------------------------
r1322 | mbr | 2008-10-30 08:12:59 -0400 (Thu, 30 Oct 2008) | 8 lines
Changed paths:
   M /fwknop/trunk/CREDITS
   M /fwknop/trunk/knoptm

Knoptm parses fwknop.conf twice.

Set $config_file according to the file specified as an argument of the
import_config function rather than using its default value.

Signed-off-by: Franck Joncourt <franck.mail@dthconnex.com>


------------------------------------------------------------------------
r1321 | mbr | 2008-10-28 22:50:05 -0400 (Tue, 28 Oct 2008) | 3 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   A /fwknop/trunk/test/conf/any_interface_fwknop.conf
   M /fwknop/trunk/test/fwknop_test.pl

- (Test suite): Added tests for Linux 'any' interface capture of SPA
packets on all interfaces.

------------------------------------------------------------------------
r1319 | mbr | 2008-10-24 08:10:38 -0400 (Fri, 24 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop_serv
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

bumped version to 1.9.9-pre4
------------------------------------------------------------------------
r1318 | mbr | 2008-10-24 08:10:21 -0400 (Fri, 24 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog

added support for the Linux 'any' interface, which requires support to be enabled for the Linux 'cooked' interface type
------------------------------------------------------------------------
r1317 | mbr | 2008-10-24 08:09:33 -0400 (Fri, 24 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

added support for the Linux 'any' interface, which requires support to be enabled for the Linux 'cooked' interface type
------------------------------------------------------------------------
r1316 | mbr | 2008-10-18 10:37:44 -0400 (Sat, 18 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog

more 1.9.9 additions
------------------------------------------------------------------------
r1314 | mbr | 2008-10-18 00:27:41 -0400 (Sat, 18 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop_serv
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

version 1.9.9-pre3
------------------------------------------------------------------------
r1313 | mbr | 2008-10-18 00:27:19 -0400 (Sat, 18 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog

1.9.9 additions
------------------------------------------------------------------------
r1312 | mbr | 2008-10-18 00:10:15 -0400 (Sat, 18 Oct 2008) | 1 line
Changed paths:
   A /fwknop/trunk/test/conf/ipt_sleep_fwknop.conf
   M /fwknop/trunk/test/fwknop_test.pl

added tests for IPT_EXEC_SLEEP
------------------------------------------------------------------------
r1311 | mbr | 2008-10-18 00:09:39 -0400 (Sat, 18 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

updated to use POSIX sys_wait_h for SIGCHLD handling, updated to pass in IPT_EXEC_SLEEP (when greater than zero) when firewall rules are being added
------------------------------------------------------------------------
r1310 | mbr | 2008-10-18 00:08:02 -0400 (Sat, 18 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/knoptm

updated to use a global IPTables::ChainMgr object so that usage of IPT_EXEC_SLEEP greater than zero does not slow things down too much
------------------------------------------------------------------------
r1309 | mbr | 2008-10-18 00:06:37 -0400 (Sat, 18 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/deps/IPTables-Parse/Changes
   M /fwknop/trunk/deps/IPTables-Parse/VERSION
   M /fwknop/trunk/deps/IPTables-Parse/lib/IPTables/Parse.pm

updated to IPTables::Parse 0.7
------------------------------------------------------------------------
r1308 | mbr | 2008-10-18 00:05:58 -0400 (Sat, 18 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/deps/IPTables-ChainMgr/Changes
   M /fwknop/trunk/deps/IPTables-ChainMgr/VERSION
   M /fwknop/trunk/deps/IPTables-ChainMgr/lib/IPTables/ChainMgr.pm

updated to version 0.8
------------------------------------------------------------------------
r1307 | mbr | 2008-10-16 01:29:12 -0400 (Thu, 16 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknop.conf
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/test/conf/blacklist_dashA_IP_fwknop.conf
   M /fwknop/trunk/test/conf/blacklist_fwknop.conf
   M /fwknop/trunk/test/conf/default_fwknop.conf
   M /fwknop/trunk/test/conf/filter_62203_fwknop.conf
   M /fwknop/trunk/test/conf/forward_chain_fwknop.conf
   M /fwknop/trunk/test/conf/gpg2_fwknop.conf
   M /fwknop/trunk/test/conf/md5_fwknop.conf
   M /fwknop/trunk/test/conf/no_local_nat_fwknop.conf
   M /fwknop/trunk/test/conf/no_promisc_fwknop.conf
   M /fwknop/trunk/test/conf/output_chain_fwknop.conf
   M /fwknop/trunk/test/conf/pcap_file_fwknop.conf
   M /fwknop/trunk/test/conf/pk_fwknop.conf
   M /fwknop/trunk/test/conf/popen_fwknop.conf
   M /fwknop/trunk/test/conf/rand_port_fwknop.conf
   M /fwknop/trunk/test/conf/sha1_fwknop.conf
   M /fwknop/trunk/test/conf/sha256_fwknop.conf
   M /fwknop/trunk/test/conf/spa_aging_fwknop.conf
   M /fwknop/trunk/test/conf/system_fwknop.conf

Added IPT_EXEC_TRIES to allow iptables commands to be re-tried if there are any errors
------------------------------------------------------------------------
r1306 | mbr | 2008-10-16 01:28:41 -0400 (Thu, 16 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/knoptm

added IPT_CMD_ALARM, IPT_EXEC_STYLE, IPT_EXEC_SLEEP, and IPT_EXEC_TRIES handling
------------------------------------------------------------------------
r1305 | mbr | 2008-10-15 23:38:04 -0400 (Wed, 15 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

fixed --Dump-config tests by referencing local files but allowing /etc/fwknop/fwknop.conf to take precedence
------------------------------------------------------------------------
r1304 | mbr | 2008-10-15 23:37:30 -0400 (Wed, 15 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/conf/override_sleep_fwknop.conf

added IPT_CMD_ALARM, IPT_EXEC_STYLE, and IPT_EXEC_SLEEP vars
------------------------------------------------------------------------
r1303 | mbr | 2008-10-15 23:20:06 -0400 (Wed, 15 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

minor bugfix for IPTables::ChainMgr system() testing
------------------------------------------------------------------------
r1302 | mbr | 2008-10-15 23:17:26 -0400 (Wed, 15 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

Added the ability to set the version of the IPTables::ChainMgr module from the command line with --IPT
------------------------------------------------------------------------
r1301 | mbr | 2008-10-14 07:20:16 -0400 (Tue, 14 Oct 2008) | 1 line
Changed paths:
   A /fwknop/trunk/test/conf/popen_fwknop.conf
   A /fwknop/trunk/test/conf/system_fwknop.conf
   M /fwknop/trunk/test/fwknop_test.pl

added the ability to dump process ID's if the test suite alarm expires against fwknopd, added tests for popen() and system() execution models for IPTables::ChainMgr
------------------------------------------------------------------------
r1300 | mbr | 2008-10-13 22:14:25 -0400 (Mon, 13 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

added IPT_EXEC_SLEEP
------------------------------------------------------------------------
r1299 | mbr | 2008-10-09 22:04:07 -0400 (Thu, 09 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

minor comma bugfix
------------------------------------------------------------------------
r1298 | mbr | 2008-10-09 22:03:17 -0400 (Thu, 09 Oct 2008) | 12 lines
Changed paths:
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknop.conf
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/test/conf/blacklist_dashA_IP_fwknop.conf
   M /fwknop/trunk/test/conf/blacklist_fwknop.conf
   M /fwknop/trunk/test/conf/default_fwknop.conf
   M /fwknop/trunk/test/conf/filter_62203_fwknop.conf
   M /fwknop/trunk/test/conf/forward_chain_fwknop.conf
   M /fwknop/trunk/test/conf/gpg2_fwknop.conf
   M /fwknop/trunk/test/conf/md5_fwknop.conf
   M /fwknop/trunk/test/conf/no_local_nat_fwknop.conf
   M /fwknop/trunk/test/conf/no_promisc_fwknop.conf
   M /fwknop/trunk/test/conf/output_chain_fwknop.conf
   M /fwknop/trunk/test/conf/pcap_file_fwknop.conf
   M /fwknop/trunk/test/conf/pk_fwknop.conf
   M /fwknop/trunk/test/conf/rand_port_fwknop.conf
   M /fwknop/trunk/test/conf/sha1_fwknop.conf
   M /fwknop/trunk/test/conf/sha256_fwknop.conf
   M /fwknop/trunk/test/conf/spa_aging_fwknop.conf

- Added IPT_CMD_ALARM to control the number of seconds that the
IPTables::ChainMgr module uses to wrap alarm() calls around iptables
commands (for IPTables::ChainMgr 0.8 and later, although this does not
interfere with earlier versions of the module).
- Added IPT_EXEC_STYLE to control the execution method used for iptables
commands in the IPTables::ChainMgr module.  The default is "waitpid",
but "system", and "popen" are also supported.
- Added IPT_EXEC_SLEEP to control the number of seconds that the
IPTables::ChainMgr module uses to delay between each iptables command.
The default is zero (no delay), but this can be increased to ensure that
iptables commands are issued at a slower pace.

------------------------------------------------------------------------
r1297 | mbr | 2008-10-09 21:49:07 -0400 (Thu, 09 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknop_serv

minor tab -> expanded whitespace fix
------------------------------------------------------------------------
r1296 | mbr | 2008-10-09 21:46:48 -0400 (Thu, 09 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/knoptm

bugfix to include --Override-config parsing
------------------------------------------------------------------------
r1295 | mbr | 2008-10-09 00:38:14 -0400 (Thu, 09 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

minor spacing fix
------------------------------------------------------------------------
r1294 | mbr | 2008-10-07 23:13:34 -0400 (Tue, 07 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

added checks for running fwknop processes besides just fwknopd
------------------------------------------------------------------------
r1292 | mbr | 2008-10-05 23:50:40 -0400 (Sun, 05 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop_serv
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

version to 1.9.9-pre2
------------------------------------------------------------------------
r1291 | mbr | 2008-10-05 23:50:21 -0400 (Sun, 05 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/test/fwknop_test.pl

bugfix to make sure to write out the local SPA key before trying to acquire the first SPA packet
------------------------------------------------------------------------
r1289 | mbr | 2008-10-05 23:33:07 -0400 (Sun, 05 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/VERSION
   M /fwknop/trunk/fwknop
   M /fwknop/trunk/fwknop_serv
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/knoptm
   M /fwknop/trunk/knopwatchd.c
   M /fwknop/trunk/test/fwknop_test.pl

version to 1.9.9-pre1
------------------------------------------------------------------------
r1288 | mbr | 2008-10-05 23:32:10 -0400 (Sun, 05 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/CREDITS
   M /fwknop/trunk/ChangeLog
   M /fwknop/trunk/fwknopd

added --Override-config
------------------------------------------------------------------------
r1287 | mbr | 2008-10-05 23:31:51 -0400 (Sun, 05 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd.8

Added --Dump-config and --Override-config
------------------------------------------------------------------------
r1286 | mbr | 2008-10-05 23:27:59 -0400 (Sun, 05 Oct 2008) | 1 line
Changed paths:
   A /fwknop/trunk/test/conf/override_sleep_fwknop.conf
   M /fwknop/trunk/test/fwknop_test.pl

Added tests for fwknopd --Override configs, filesystem SPA packet caching (with --Save-packet and --Save-packet-append), added uptime to system specifics
------------------------------------------------------------------------
r1285 | mbr | 2008-10-05 14:30:06 -0400 (Sun, 05 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/fwknopd

more verbose debugging output for iptables commands
------------------------------------------------------------------------
r1284 | mbr | 2008-10-05 14:27:48 -0400 (Sun, 05 Oct 2008) | 1 line
Changed paths:
   M /fwknop/trunk/ChangeLog

started on 1.9.9 additions
------------------------------------------------------------------------
r1283 | mbr | 2008-10-05 13:51:58 -0400 (Sun, 05 Oct 2008) | 6 lines
Changed paths:
   M /fwknop/trunk/fwknopd
   M /fwknop/trunk/test/fwknop_test.pl

- Added --Dump-conf to fwknopd (suggested by Franck Joncourt).
- Added execution of --Dump-conf to the test suite to collect the installed
  version of the fwknop.conf and access.conf files.
- Added time stamps to MSG and TEST lines for each test (useful to see the
  relative time if an alarm expires).

------------------------------------------------------------------------
