Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-04-27 | typo and remove some Ns hacks no longer needed; | Jason McIntyre | |
2004-04-27 | irregardless -> irrespective; | Jason McIntyre | |
ok millert@ krw@ derision from the rest of the world stolen from a rejected freebsd pr; | |||
2004-04-27 | various small fixes; | Jason McIntyre | |
ok mcbride@ | |||
2004-04-27 | regress test for environment passing, SendEnv & AcceptEnv options; ok markus@ | Damien Miller | |
2004-04-27 | bz #815: implement ability to pass specified environment variables from the | Damien Miller | |
client to the server; ok markus@ | |||
2004-04-27 | do not link ssltest.c into libssl, stops main/doit symbols from being | Anil Madhavapeddy | |
exported. no bump needed since nothing should use them, markus@ ok | |||
2004-04-27 | crud stripping; henning ok | Theo de Raadt | |
2004-04-27 | do the errno ERANGE dance around a strtol; henning ok | Theo de Raadt | |
2004-04-27 | announce route refresh capability, and parse announced route refresh capa | Henning Brauer | |
2004-04-27 | print route refresh capability if present | Henning Brauer | |
2004-04-27 | initial route refresh support per RFC2918 | Henning Brauer | |
process incoming route refresh request and notify the RDE not advertised via capabilities yet, claudio ok | |||
2004-04-27 | Fix typo in ifstated.conf. Reported by matthew zeier, then forgotten... | Ryan Thomas McBride | |
re-reported by Jan Filipovsky. | |||
2004-04-27 | Recalculation of memory footprint of ASC/ASCQ table since I was in here ↵ | Marco Peereboom | |
anyway. ok krw@ | |||
2004-04-27 | make separate functions to enable/disable altq, and call them when we | Kenjiro Cho | |
reload rules. this fixes an altq problem that, if you reload pf rules not containing queues while running altq, the interface shaper is not properly removed. make pf_altq_running local to pf_ioctl.c since it is no longer used in altq_subr.c. ok henning@ | |||
2004-04-27 | curpeer must be set back to curgroup, not NULL | Henning Brauer | |
2004-04-26 | need more checks on the keys | Henning Brauer | |
2004-04-26 | drop tcp connections using sysctl(2) | Markus Friedl | |
2004-04-26 | sf works now (for reasonable amounts of ram at least). ok deraadt@ | Ted Unangst | |
2004-04-26 | Use a common source file for all the hash helper functions that | Todd C. Miller | |
previously lived in foohl.c. The foohl.c files are now generated via sed, though perhaps cpp could be used in the future. Use u_int8_t instead of unsigned char for the buffers struct fooContext. Add constants for buffer lengths and use them in function prototypes and the man pages. This is basically cosmetic surgery; there should be no functional changes. OK deraadt@ | |||
2004-04-26 | add -n flag (do not reverse-lookup). pb and deraadt ok | Jun-ichiro itojun Hagino | |
2004-04-26 | unbreak | Henning Brauer | |
2004-04-26 | vaddr_t casts for vtophys, works on amd64. ok deraadt@ | Ted Unangst | |
2004-04-26 | nfs_poll cannot simply be defined to seltrue so use a stub nfs_poll | Todd C. Miller | |
duplicated from UFS. Closes PR 3757; OK deraadt@ | |||
2004-04-26 | bzero hint before use. | Jun-ichiro itojun Hagino | |
2004-04-26 | change tcpdrop to require newp instead of oldp; suggested by otto | Markus Friedl | |
2004-04-26 | - allow the user to force the TCP mss below the fail-safe 216 with a low | Mike Frantzen | |
interface MTU. - break a tcp_output() -> tcp_mtudisc() -> tcp_output() infinite recursion when the TCP mss ends up larger than the interface MTU (when the if_mtu is smaller than the tcp header). connections will still stall feedback from itojun@, claudio@ and provos and testing from beck@ | |||
2004-04-26 | oh we need to model check and not crank > 256 for older cards... do that later | Theo de Raadt | |
2004-04-26 | isalnum() does not match '_' so check it explicitly. This allows cron | Todd C. Miller | |
to send mail to usernames with a '_' in them. From David Gwynne. | |||
2004-04-26 | Fix RCSID | Miod Vallat | |
2004-04-26 | Oops, unbreak m88k; spotted by aoyama@ | Miod Vallat | |
2004-04-26 | Start factorizing luna88k and mvme88k common parts. | Miod Vallat | |
For now, include files only. | |||
2004-04-26 | load ipsec SAs into the kernel and enable them. | Markus Friedl | |
2004-04-26 | don't forget to set keylen, markus | Henning Brauer | |
2004-04-26 | - make the k field in struct bpf_insn unsigned, as promised in the | Otto Moerbeek | |
manual page. - more strict bpf code validation, preventing arbitrary kernel memory read and writes. Some help from frantzen@ and canacar@; testing jmc@ markus@; ok canacar@ henning@ franzen@ | |||
2004-04-26 | parser support for setting ipsec keys and such, markus ok | Henning Brauer | |
2004-04-26 | this driver had 256 clusters for receive buffers. move to 512, to increase | Theo de Raadt | |
performance, if the interface is up. at boot time, allocate only 12 though ... though we note that em_stop() frees them all. perhaps some are used to talk to other parts of the engine though at runtime... tested by mcbride and beck | |||
2004-04-26 | fix route with explicit -gateway modifier. ok deraadt@ itojun@ | Cedric Berger | |
2004-04-26 | sync | Theo de Raadt | |
2004-04-26 | Before enqueueing the packet, copy the contents of incoming clusters | Ryan Thomas McBride | |
to the mbuf and free the cluster when it contains a small packet. ok deraadt@ | |||
2004-04-26 | start with minimum recieve rings. when we ifconfig up, allocate more. | Theo de Raadt | |
this reduces mbuf clusters sitting around unused. from mcbride, fixed by me, tested by frantzen | |||
2004-04-26 | hide nonstandard struct from userland | Jun-ichiro itojun Hagino | |
2004-04-26 | fix printing template neighbors | Henning Brauer | |
2004-04-26 | need keylen too, markus | Henning Brauer | |
2004-04-26 | Allocate rx buffer mbuf clusters at ifconfig time, release them when the | Ryan Thomas McBride | |
interface is configured down. FXP_NRFABUFS_MIN clusters are allocated at all times as they are used by the driver to send commands to the card. ok deraadt@ | |||
2004-04-26 | do more careful altq bandwidth checking. | Kenjiro Cho | |
- fix a bug in HFSC that does not take the newly added queue into account when computing the bandwidth for admission control. - warn when the sum of the child bandwidth exceeds parent's bandwidth for both CBQ and HFSC. - allow to explicitly specify 0bps to bandwidth. HFSC can have only the real-time sc, and it means a blackhole queue for CBQ. problem reports by "Alexey E. Suslikov" <cruel@texnika.com.ua> ok henning@ | |||
2004-04-26 | Howe eye wysh eye cud spel. | Ryan Thomas McBride | |
2004-04-26 | Prevent biases in arc4random() from disclosing the byte order of the firewall. | Ryan Thomas McBride | |
ok deraadt@ | |||
2004-04-26 | The rule_number parameter for pf_get_pool() needs to be 32 bits, not 8 - | Ryan Thomas McBride | |
this fixes corruption of the address pools with large rulesets. This is a candidate for -stable. Reported by Zbigniew Kossowski <zk@openbsd.com.pl>, hours of braintwisting debugging by pb@ | |||
2004-04-26 | double check that the carp* interfaces exist before knocking them down, | Theo de Raadt | |
mcbride and i think this diff looks good but do not feel like doing the 250 meter walk to go test it | |||
2004-04-26 | structs for ipsec, with markus | Henning Brauer | |