summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2004-04-27typo and remove some Ns hacks no longer needed;Jason McIntyre
2004-04-27irregardless -> irrespective;Jason McIntyre
ok millert@ krw@ derision from the rest of the world stolen from a rejected freebsd pr;
2004-04-27various small fixes;Jason McIntyre
ok mcbride@
2004-04-27regress test for environment passing, SendEnv & AcceptEnv options; ok markus@Damien Miller
2004-04-27bz #815: implement ability to pass specified environment variables from theDamien Miller
client to the server; ok markus@
2004-04-27do not link ssltest.c into libssl, stops main/doit symbols from beingAnil Madhavapeddy
exported. no bump needed since nothing should use them, markus@ ok
2004-04-27crud stripping; henning okTheo de Raadt
2004-04-27do the errno ERANGE dance around a strtol; henning okTheo de Raadt
2004-04-27announce route refresh capability, and parse announced route refresh capaHenning Brauer
2004-04-27print route refresh capability if presentHenning Brauer
2004-04-27initial route refresh support per RFC2918Henning Brauer
process incoming route refresh request and notify the RDE not advertised via capabilities yet, claudio ok
2004-04-27Fix typo in ifstated.conf. Reported by matthew zeier, then forgotten...Ryan Thomas McBride
re-reported by Jan Filipovsky.
2004-04-27Recalculation of memory footprint of ASC/ASCQ table since I was in here ↵Marco Peereboom
anyway. ok krw@
2004-04-27make separate functions to enable/disable altq, and call them when weKenjiro Cho
reload rules. this fixes an altq problem that, if you reload pf rules not containing queues while running altq, the interface shaper is not properly removed. make pf_altq_running local to pf_ioctl.c since it is no longer used in altq_subr.c. ok henning@
2004-04-27curpeer must be set back to curgroup, not NULLHenning Brauer
2004-04-26need more checks on the keysHenning Brauer
2004-04-26drop tcp connections using sysctl(2)Markus Friedl
2004-04-26sf works now (for reasonable amounts of ram at least). ok deraadt@Ted Unangst
2004-04-26Use a common source file for all the hash helper functions thatTodd C. Miller
previously lived in foohl.c. The foohl.c files are now generated via sed, though perhaps cpp could be used in the future. Use u_int8_t instead of unsigned char for the buffers struct fooContext. Add constants for buffer lengths and use them in function prototypes and the man pages. This is basically cosmetic surgery; there should be no functional changes. OK deraadt@
2004-04-26add -n flag (do not reverse-lookup). pb and deraadt okJun-ichiro itojun Hagino
2004-04-26unbreakHenning Brauer
2004-04-26vaddr_t casts for vtophys, works on amd64. ok deraadt@Ted Unangst
2004-04-26nfs_poll cannot simply be defined to seltrue so use a stub nfs_pollTodd C. Miller
duplicated from UFS. Closes PR 3757; OK deraadt@
2004-04-26bzero hint before use.Jun-ichiro itojun Hagino
2004-04-26change tcpdrop to require newp instead of oldp; suggested by ottoMarkus Friedl
2004-04-26- allow the user to force the TCP mss below the fail-safe 216 with a lowMike Frantzen
interface MTU. - break a tcp_output() -> tcp_mtudisc() -> tcp_output() infinite recursion when the TCP mss ends up larger than the interface MTU (when the if_mtu is smaller than the tcp header). connections will still stall feedback from itojun@, claudio@ and provos and testing from beck@
2004-04-26oh we need to model check and not crank > 256 for older cards... do that laterTheo de Raadt
2004-04-26isalnum() does not match '_' so check it explicitly. This allows cronTodd C. Miller
to send mail to usernames with a '_' in them. From David Gwynne.
2004-04-26Fix RCSIDMiod Vallat
2004-04-26Oops, unbreak m88k; spotted by aoyama@Miod Vallat
2004-04-26Start factorizing luna88k and mvme88k common parts.Miod Vallat
For now, include files only.
2004-04-26load ipsec SAs into the kernel and enable them.Markus Friedl
2004-04-26don't forget to set keylen, markusHenning Brauer
2004-04-26- make the k field in struct bpf_insn unsigned, as promised in theOtto Moerbeek
manual page. - more strict bpf code validation, preventing arbitrary kernel memory read and writes. Some help from frantzen@ and canacar@; testing jmc@ markus@; ok canacar@ henning@ franzen@
2004-04-26parser support for setting ipsec keys and such, markus okHenning Brauer
2004-04-26this driver had 256 clusters for receive buffers. move to 512, to increaseTheo de Raadt
performance, if the interface is up. at boot time, allocate only 12 though ... though we note that em_stop() frees them all. perhaps some are used to talk to other parts of the engine though at runtime... tested by mcbride and beck
2004-04-26fix route with explicit -gateway modifier. ok deraadt@ itojun@Cedric Berger
2004-04-26syncTheo de Raadt
2004-04-26Before enqueueing the packet, copy the contents of incoming clustersRyan Thomas McBride
to the mbuf and free the cluster when it contains a small packet. ok deraadt@
2004-04-26start with minimum recieve rings. when we ifconfig up, allocate more.Theo de Raadt
this reduces mbuf clusters sitting around unused. from mcbride, fixed by me, tested by frantzen
2004-04-26hide nonstandard struct from userlandJun-ichiro itojun Hagino
2004-04-26fix printing template neighborsHenning Brauer
2004-04-26need keylen too, markusHenning Brauer
2004-04-26Allocate rx buffer mbuf clusters at ifconfig time, release them when theRyan Thomas McBride
interface is configured down. FXP_NRFABUFS_MIN clusters are allocated at all times as they are used by the driver to send commands to the card. ok deraadt@
2004-04-26do more careful altq bandwidth checking.Kenjiro Cho
- fix a bug in HFSC that does not take the newly added queue into account when computing the bandwidth for admission control. - warn when the sum of the child bandwidth exceeds parent's bandwidth for both CBQ and HFSC. - allow to explicitly specify 0bps to bandwidth. HFSC can have only the real-time sc, and it means a blackhole queue for CBQ. problem reports by "Alexey E. Suslikov" <cruel@texnika.com.ua> ok henning@
2004-04-26Howe eye wysh eye cud spel.Ryan Thomas McBride
2004-04-26Prevent biases in arc4random() from disclosing the byte order of the firewall.Ryan Thomas McBride
ok deraadt@
2004-04-26The rule_number parameter for pf_get_pool() needs to be 32 bits, not 8 -Ryan Thomas McBride
this fixes corruption of the address pools with large rulesets. This is a candidate for -stable. Reported by Zbigniew Kossowski <zk@openbsd.com.pl>, hours of braintwisting debugging by pb@
2004-04-26double check that the carp* interfaces exist before knocking them down,Theo de Raadt
mcbride and i think this diff looks good but do not feel like doing the 250 meter walk to go test it
2004-04-26structs for ipsec, with markusHenning Brauer