summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2009-01-29Fix offset calculation for lsa_prefix structs.Stefan Sperling
ok claudio@
2009-01-29Better error handling.Marc Balmer
2009-01-29missing prototype for session_respond() in mta, move session_respond()'sGilles Chehade
prototype to smtpd.h spotted and diff from Oleg Safiullin <form@pdp-11.org.ru>
2009-01-29After checking that peer == NULL do not assign peer = NULL a fewAlexander Bluhm
lines later. No functional change. ok grunk@, hshoexer@
2009-01-29- remove debug messageGilles Chehade
2009-01-29Received header line was incomplete for mail submitted through the enqueuerGilles Chehade
as well as for some outgoing messages, this is fixed now
2009-01-29Split the address selection from pools away from pf.c and put it inPierre-Yves Ritschard
pf_lb.c. This will ease the process of adding more selection types without bloatening pf.c even more. ok and a weird death threat, henning@ raised eyebrow, dlg@
2009-01-29fix a bug in mta's event maskingGilles Chehade
2009-01-29tweak previous;Jason McIntyre
2009-01-29tweak previous;Jason McIntyre
2009-01-29initial starttls support in mta, this allows:Gilles Chehade
accept for domain "openbsd.org" relay via tls "mx.example.org" to ensure the relaying of mail for whoever@openbsd.org will happen through a secure tls (STARTTLS) session. failure to establish a tls session will be considered as a permanent failure. As a side effect: accept for domain "openbsd.org" relay via ssl "mx.example.org" can now work as well and ensure that the relaying happens through ssmtp OR tls, but never through an unsafe channel. no need to specify a port, they are automatically detected if not specified. still a work in progress, don't expect that it will work flawlessly.
2009-01-29Correct capitalization.Pierre-Yves Ritschard
From Thomas Pfaff.
2009-01-29move some code around in preparation for future work:Henning Brauer
break out the code that doesn't deal with fragment reassembly and only modifies stuff in the ip header to their own functions. pass them what they need instead of making them get the info from a rule ptr. ok dlg ryan
2009-01-29Correct copyright years.Marc Balmer
2009-01-29Only start using the rtc for statclock after we've received the firstMark Kettenis
interrupt. On some machines the rtc doesn't generate interrupts and we would end up not running statclock() at all. ok miod@, art@
2009-01-29* Add more CFLAGS commonly found in src/usr.sbin/Pierre-Yves Ritschard
* Add prototype for wake() * Add __dead to usage (for lint) * Do not rely on pointer value for asprintf return as advised * Make sure lint is happy some comments and ok mbalmer@
2009-01-29Fix a crash found by bluhm@ in rn_mpath_reprio(). The rn_mklist handling wasClaudio Jeker
wrong which resulted in a NULL rm_leaf which caussed a NULL deref a bit later. Check against the right route nodes to figure out if the rm_leaf needs to be updated. Tested by bluhm@, OK dlg@
2009-01-29detect truncation with strlcpy, not strlen.Pierre-Yves Ritschard
ok mbalmer@
2009-01-29Report error if wake on lan frame is not sent correctly.Pierre-Yves Ritschard
Loop in the really unlikely event of a non atomic write. ok mbalmer@
2009-01-29simplify the bpf opening loop a bit.Pierre-Yves Ritschard
``shorter is always better'' and ok mbalmer@
2009-01-29bring initial support for SSL in the mta part of smtpd, allowing for:Gilles Chehade
accept for domain "openbsd.org" relay via ssmtp "mx1.example.org" to ensure that deliveries for whatever@openbsd.org goes through an SSL session to mx1.example.org
2009-01-29My try at documenting the route socket filtering. ja ja dlg@Claudio Jeker
2009-01-29Common queue walking code for smtpd and smtpctl. Kills majority of showqueue.c,Jacek Masiulaniec
the remaining code was moved to queue_shared.c; ok gilles@
2009-01-29Make multicast actually work this time.Mark Kettenis
2009-01-29Always zero the IP checksum field for packets and packet fragmentsChristian Weisgerber
being passed down if using HW checksum offload. From Brad, inspired by NetBSD/FreeBSD. ok markus@
2009-01-29Hard-code the Link State ID of Intra-Area-Prefix LSAs referencing NetworkStefan Sperling
LSAs to zero. We were using the interface index, which is not quite right for this type of LSA. This is part of a greater scheme: Intra-Area-Prefix LSAs referencing Router LSAs (not yet implemented) will initially have their Link State ID hard-coded to one. Then, as soon as we implement fragmentation of Intra-Area-Prefix LSAs, Link State IDs for both types of Intra-Area-Prefix LSA will have to be generated dynamically in a non-overlapping fashion. discussed with claudio@
2009-01-29Improve debugging message in orig_intra_lsa_net().Stefan Sperling
Print not just the area, but also the interface to the link the LSA is generated for. ok claudio@
2009-01-29Similar to my last commit, it's stupid to have a file with two veryOwain Ainsworth
small functions in it. Move them to main driver file.
2009-01-29Move drmmmap to the main driver file. It's stupid to have a file withOwain Ainsworth
one (not particlarly large) function in it.
2009-01-29Make anonymous binds work properly.aschrijver
2009-01-29drm_getmap and interface can die too.Owain Ainsworth
2009-01-29No need to use RB_FIND here, RB_INSERT does that job for us.Oleg Safiullin
ok aschrijver@
2009-01-29Introduce -mplslabel to allow ipv4/ipv6 packets enter MPLS clouds.Michele Marchetto
This is also consistent with mplslabel in ifconfig(8). OK claudio@ laurent@
2009-01-29Rip out the drm_drawable support. There is no need for the xserver toOwain Ainsworth
push cliprects into the kernel anymore so no op the ioctls. The only consumer of this information died a couple of months ago. When i've got removal of these calls from userland upstream i'm going to remove them from the interface entirely.
2009-01-29mpls_operation have to be 2 bytes long to storeMichele Marchetto
operations correctly ok claudio@ laurent@
2009-01-29Round brackets are not required. Back out previous commit.Michele Marchetto
2009-01-29- remove a very annoying debug printf()Gilles Chehade
2009-01-29Switch tsec(4) over to using MCLGETI when allocating mbufs for the rx ring.Mark Kettenis
2009-01-29Remove ikefail10 ipsecctl regression test as it always fails. ItAlexander Bluhm
was expecting a certain parser error message. Accepting the ikefail10 config file is not considered to be a bug anymore. ok hshoexer@
2009-01-29Improve logging:Hans-Joerg Hoexer
- in ipsec_delete_spi_list() a log_verbose is added, when a remote peer sends us a delete message for an SA. However, to avoid spamming the log when SAs are deleted during re-keying, I only log_verbose, when the soft timeout of the SA is not expired yet. Thus only deletion of live SAs gets logged. - in ipsec_decode_ids() I remove the additonal printing of IP-Adresses in hex as the addresses are already printed in CIDR. - while there, apply some KNF ok todd@, mpf@, bluhm@
2009-01-29In tcpdump some printf() had an additional \n at the end. RemovingAlexander Bluhm
that new line restores the one-line -> one-packet semantics. ok hshoexer@, henning@, markus@
2009-01-29regenMarco Peereboom
2009-01-29Soundblaster stuff. from brad.Marco Peereboom
2009-01-29log warning when can't read drift file; allows detection ofKevin Steves
corrupt contents. ok henning@
2009-01-28fix missing prototype and format related warningsGilles Chehade
2009-01-28Add support for next generation megaraid sas raid controllers.Marco Peereboom
From Jim Giannoules <gortag@gmail.com>
2009-01-28regenMarco Peereboom
2009-01-28LSI 2108 chipsMarco Peereboom
2009-01-28now that mta uses a struct session, it can also use session_respond() justGilles Chehade
as smtp_session.c does, so move all of the evbuffer_add_printf() calls out of the way and replace them with session_respond() call.
2009-01-28mta session state belongs to struct session, not struct batch, remove theGilles Chehade
state field from struct batch and propagate the change