summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2008-05-07scrub packets based on tags; ok henningMarkus Friedl
2008-05-07Correctly initialize labels by byte-swapping and inserting BoS and TTL.Pierre-Yves Ritschard
While there bump MTU to 1500 and set the receiving interface before calling mpls_input. mpestart will eventually call mpls_output when it exists. ``yaaaaayyy'' and ok claudio@ and norby@
2008-05-07push the sshd_config bits in, spotted by ajacoutot@Pierre-Yves Ritschard
2008-05-07Document -priority. looks good norby@Claudio Jeker
2008-05-07allow setting TOS with scrub; ok mcbride, claudioMarkus Friedl
2008-05-07backout last change, it's already there....Markus Friedl
2008-05-07Add support to show and modify rtm_priority.Claudio Jeker
2008-05-07Prevent virtual interfaces from adding to the random pool.Marco Pfatschbacher
Also move the sampling into ether_input() where it can happen at the interrupt and not within splnet() processing, which might be less random. Discussed with mickey. OK markus@, mcbride@
2008-05-07Enable the AllowAgentForwarding option in sshd_config (global and matchPierre-Yves Ritschard
context), to specify if agents should be permitted on the server. As the man page states: ``Note that disabling Agent forwarding does not improve security unless users are also denied shell access, as they can always install their own forwarders.'' ok djm@, ok and a mild frown markus@
2008-05-07Implement routing priorities. Every route inserted has a priority assignedClaudio Jeker
and the one route with the lowest number wins. This will be used by the routing daemons to resolve the synchronisations issue in case of conflicts. The nasty bits of this are in the multipath code. If no priority is specified the kernel will choose an appropriate priority. Looked at by a few people at n2k8 code is much older
2008-05-07syncTheo de Raadt
2008-05-07no Xr isesTheo de Raadt
2008-05-07Rather than fixing ises(4), nuke it.Kenneth R Westerback
ok deraadt@
2008-05-07Rather than fixing ises(4), nuke it.Kenneth R Westerback
ok deraadt@
2008-05-07Redo rev 1.8 but this time with an additional fix to solve the dhclient crashesClaudio Jeker
seen by krw. This is a prerequisite for upcomming routing priorities: Always compare the nexthop if one is specified even if it is a non-multipath route. This mostly affects "route delete" and it will not remove the last route if previous delete is redone. OK henning@
2008-05-07Rather than fixing ises(4), nuke it.Kenneth R Westerback
ok deraadt@
2008-05-07Document the new mpe interface and explain the appropriate commandsPierre-Yves Ritschard
in ifconfig(8). The man pages reference mpls(8) which doesn't exist, but claudio promises it will follow shortly. a thumb up and ok from claudio@
2008-05-07Rather than fixing ises(4), nuke it.Kenneth R Westerback
ok deraadt@
2008-05-07There is no reason to have a faithrtrequest() function that sets the MTU toClaudio Jeker
route MTU to the interface MTU. By default if no route MTU is set it will fall back to the interface MTU anyway. OK henning@
2008-05-07add an alternative "route to" mode to relayd redirections which mapsReyk Floeter
to pf route-to instead of the default rdr. it is a first steps towards support for "direct server return" (dsr), an asynchronous mode where the load balanced servers send the replies to a different gateway like a l3 switch/router to handle higher amounts of return traffic. because the state handling in pf isn't optimal for this case yet, it just sees half of the TCP connection, the sessions are forced to time out after fixed number of seconds. discussed with many, thought about in the onsen
2008-05-06- move some services from unofficial to the Assigned Numbers section,Stuart Henderson
including some "cleverly" positioned in the dynamic range :( - add a couple of services relating to some ports/packages which otherwise need a manual change to this file looks good to ajacoutot, steven. suggestions/ok deraadt
2008-05-06Add a PR_ZERO flag for pools, to compliment the M_ZEROThordur I. Bjornsson
malloc flag, does the same thing. use it in a few places. OK tedu@, "then go ahead. and don't forget the manpage (-:" miod@
2008-05-06Kill vtophys in drm.Owain Ainsworth
The code we inherited from FreeBSD used vtophys is a fair few places, nuke that and replace with bus_dma. technically _DRM_SHM should be managed with uao_create(), but until we move away from mmap and into an ioctl to map, this will do. This also paves the way for amd64 support (it lacks vtophys). ok kettenis, miod looked at it a while back too.
2008-05-06currently agp_i810 needs to map the same BAR as inteldrm, this obviouslyOwain Ainsworth
fails. In order to allow this, implement an API so that drm and agp can share mappings for the BARs. Now it works as it should. tested by many. ok kettenis, miod said he'd look at it when it's in tree.
2008-05-06retire vfs_mountroot();Thordur I. Bjornsson
setroot() is now (and has been) responsible for setting the mountroot function pointer "to the right thing", or failing todo that, to ffs_mountroot; based on a discussion/diff from deraadt@. OK deraadt@
2008-05-06typo fix; from tannerJason McIntyre
ok art
2008-05-06tweak previous;Jason McIntyre
2008-05-06- put the description of -O in the right placeJason McIntyre
- shorten the argument names to -IO
2008-05-06Use the standard syslog levels on CARP logging messages instead ofRyan Thomas McBride
simple on/off, allowing more control over how verbose the logging is. This also allows you to do a further level of filtering in syslog.conf if you need to. Also add logging of state changes, inspired by diff provided by Brian A. Seklecki in PR 5513. These messages are logged by default. ok henning mpf deraadt
2008-05-06bring in the mpe interface - for ``MPLS Provider Edge'' - this is a workPierre-Yves Ritschard
in progress and some bits need to be cleaned up but will be in-tree for convenience. ok claudio@, norby@
2008-05-06the manpage mentioned "timeout" in relay sections, while the grammarReyk Floeter
expected the keywords "forward timeout". rename it to "session timeout" and sync the documentation with reality.
2008-05-06Apple USB Ethernet Adapter A1277.Marco Pfatschbacher
2008-05-06Yet another missing RTM_VERSION check. Found by norby@. OK henning@Claudio Jeker
2008-05-06Add support for the Apple USB Ethernet adapter.Marco Pfatschbacher
Work around the "latch in at the first working PHY address hack", that fails for this adapter because it returns 0xffff when reading from lower PHY addresses. Also add more debugging printfs. Testing and OK jsg@
2008-05-06AMD_8111_PMC has timecounter, too; ok grange@ some time agoMarkus Friedl
2008-05-06syncMarco Pfatschbacher
2008-05-06Add Apple USB Ethernet.Marco Pfatschbacher
2008-05-06the message digest http check does not work on binary content, add manpageReyk Floeter
clarification. From bsd at openbsd dot rutgers dot edu, closes pr5801 ok pyr@
2008-05-06Remove bogus entries for PCI_PRODUCT_DELL_PERC_3DI_2, which apparentlyMarco Pfatschbacher
is an UART. Makes aac(4) compile again. OK dlg@
2008-05-06print IN6_IFF_AUTOCONF flag, too; ok henning some time agoMarkus Friedl
2008-05-06fix the table stats clr ioctlReyk Floeter
2008-05-06We have to check if server_argc is 1 instead of lesser than 0 to see ifTobias Stoeckmann
an Argumentx directive has been sent to server without prior Argument. ok joris, xsa
2008-05-06do not attempt to reload a configuration if we come from a non pfPierre-Yves Ritschard
requiring configuration to a pf requiring one. ok reyk@
2008-05-06Kill state if we get SYN for a state that has been closed from both sides.Markus Friedl
ok henning@
2008-05-06Better formatting.Marc Balmer
2008-05-06Document signal/clock status.Marc Balmer
2008-05-06Report the clock status in a signal sensor, like all other timedeltas.Marc Balmer
2008-05-06remove tcp_drain code since it's not longer used; ok henning, feedback thibMarkus Friedl
2008-05-06Drop all broadcast and multicast packets.Esben Norby
ok claudio@
2008-05-06get rid of rtalloc, use rtalloc1 instead.Esben Norby
ok claudio@