summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2003-05-11the start of stateful TCP scrubbing. dynamically determine the highest TTL ofMike Frantzen
each side of the TCP connection and prevent it from being reduced ok pb@ dhartmei@
2003-05-11make channel_new() strdup the 'remote_name' (not the caller); ok theoMarkus Friedl
2003-05-11Put the generated asn1 files in the tree, so that the asn1_compileHans Insulander
dependency no longer bites. Idea by art@ ok deraadt@
2003-05-11don't run off end of strings and use bad pointersMarcus Watts
iterate boot list at most once allow kernel names with - in them complain about option strings that do not start with - distinguish between short read & bad read don't quit if a file can be opened but can't be booted
2003-05-11Shrink & clarify code around ftp/http proxy identification.Kenneth R Westerback
Eliminate unnecessary _proxy_host variable that merely kept a copy of the value of ftp_proxy and http_proxy.
2003-05-11syncTheo de Raadt
2003-05-11finish compat swapon cleanupTheo de Raadt
2003-05-11string cleaning; krw okTheo de Raadt
2003-05-11nuke debugging stuffJason Wright
2003-05-11Use asprintf instead of malloc,strcpy,strcatHans Insulander
ok deraadt@ mho@
2003-05-11when doing sparse writes, we must write the last byte or the file willTed Unangst
be shortened. problem found by wcobb and naddy. ok millert@
2003-05-11Don't reject a perfectly valid absolute path to sets just because theKenneth R Westerback
user was observant enough to see where the filesystems are mounted. Suggested by espie@.
2003-05-11change key_load_public to try to read a public from:Markus Friedl
rsa1 private or rsa1 public and ssh2 keys. this makes ssh-keygen -e fail for ssh1 keys more gracefully for example; report from itojun (netbsd pr 20550).
2003-05-11Document \sPaul Janzen
2003-05-11CNET CNF301, Lucas Maneos <openbsd@subs.maneos.org>Henning Brauer
2003-05-11syncHenning Brauer
2003-05-11CNet CNF301, Lucas Maneos <openbsd@subs.maneos.org>Henning Brauer
2003-05-11More.Dale Rahn
2003-05-11remove two remnants of an imaginary in-kernel AFS supportTed Unangst
2003-05-11Remove duplicate prototype.Paul Janzen
2003-05-11Corrections from FreeBSD via NetBSD.Paul Janzen
2003-05-11comma splice.Paul Janzen
2003-05-11get the offset of the config space correct, now to figure out why the rtc is ↵Jason Wright
unhappy.
2003-05-11Crank minorHans Insulander
2003-05-11merge with heimdalHans Insulander
2003-05-11Fix a few merge mistakesHans Insulander
2003-05-11These files do not belong in kadmin clientHans Insulander
2003-05-11set_progname removedHans Insulander
2003-05-11define SYSCONFDIRHans Insulander
2003-05-11New file needed by heimdal-0.6rc1Hans Insulander
2003-05-11Stuff needed for heimdal-0.6rc1Hans Insulander
2003-05-11Small changes needed for heimdal-0.6rc1Hans Insulander
2003-05-11Merge 0.6rc1Hans Insulander
2003-05-11revert part of previous. if mfs gets a signal, it doesn't attempt toTed Unangst
force the unmount, so there's no need to mess with resetting processes' working dirs.
2003-05-11syncTheo de Raadt
2003-05-11check done for NULL before dereferencing. ok drahn@Ted Unangst
2003-05-11fix ID-type for ipv6; ok niklas; report friesMarkus Friedl
2003-05-11Import of heimdal-0.6rc1Hans Insulander
2003-05-11Regress tests for explicit nat translation port.Ryan Thomas McBride
2003-05-11Don't ntohs() the translation port for nat as it is already in host byte order.Ryan Thomas McBride
Makes nat ... -> $ext_if port 500 rules work correctly again. ok henning@ dhartemi@ frantzen@
2003-05-11use LK_EXCLUSIVE like all other file systems.Ted Unangst
use LK_RETRY in kernfs_root(). "just in case" stuff.
2003-05-11Use sizeof(struct icmp6_hdr) instead of ICMP_MINLEN for IPv6, both areDaniel Hartmeier
8 bytes, but the former is more appropriate. ok frantzen@
2003-05-10Pass ICMP error messages referring to non-TCP/UDP/ICMP packets statefully,Daniel Hartmeier
instead of just dropping them. ok frantzen@, henning@, pb@
2003-05-10'return' now causes an ICMP unreachable for non-TCP/UDP/ICMP protocols.Daniel Hartmeier
2003-05-10Support return-icmp for 'other' protocols (non-TCP/UDP/ICMP), for instanceDaniel Hartmeier
stock OpenBSD stack returns 'protocol unreachable'. ok frantzen@, henning@, pb@
2003-05-10"enought to" -> "enough to" comment typoDaniel Hartmeier
2003-05-10document PACKET_TAG_PF_QIDHenning Brauer
ok jmc@
2003-05-10uppercase all non-literals in BNF.. might make some stuff more clear ;)Philipp Buehler
commitski henning@
2003-05-10Prepare pf_change_icmp() for parameter ip == NULL use.Daniel Hartmeier
ok frantzen@, henning@, pb@
2003-05-10typos;Jason McIntyre