summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2002-06-07henning, read this to see what i mean by KNFTheo de Raadt
2002-06-07increase rule label length from 32 to 64 charsHenning Brauer
okay dhartmei@, frantzen@
2002-06-07add the possibility to configure a TTL while return-rstPhilipp Buehler
ok dhartmei@, ipv6 part itojun@ ok
2002-06-07Fix more timeout handling issues in ohci. There are still cursed harrdwareMiod Vallat
that will keep dying with this applied, though. Discussed with drahn@
2002-06-07syncTheo de Raadt
2002-06-07styleJun-ichiro itojun Hagino
2002-06-07Avoid some gcc3 warnings. From David Krause <openbsd@davidkrause.com>Hakan Olsson
2002-06-07print rip6statJun-ichiro itojun Hagino
2002-06-07More DDB fallout.Dale Rahn
2002-06-07Fix DDB build problem, minor cleanup.Dale Rahn
2002-06-07The code to append the last 5 digits of the time in Unix format toTodd C. Miller
the default seed was lost in the flat file -> directory structure conversion. Instead of reinstating that, use arc4random() to get some noise and append the last 5 digits to the seed.
2002-06-07This doesn't happen, and Debugger should not be used here anyway...Dale Rahn
2002-06-07move IPV6_CHECKSUM processing to ip6_raw_ctloutput(). bunch of KNFs.Jun-ichiro itojun Hagino
rip6 stats. sync w/kame
2002-06-07in pf_route{6}, do not pass thru pf_test again if the outgoingjasoni
interface has not changed - ok dhartmei@
2002-06-07Instead of passing seed and defaultseed to normal_mode() andTodd C. Miller
secure_mode() just pass in a single default seed. Only secure_mode() needs to actually change the seed and it can use its own temporary buffer. Fix zeroing of the secrete passphrase. Instead of useing multiple password buffers, crunch the key each time and compare the crunched values.
2002-06-07Remove obsolete CLKF_BASEPRI(). ok niklas@, miod@ and art@Thomas Nordin
2002-06-07Add "(max <number>)" option for "keep/modulate state" to limit the numberDaniel Hartmeier
of concurrent connections a rule can create. ok frantzen@
2002-06-07Change addupc_intr to not use fuswintr and suswintr to update the profilingArtur Grabowski
info. Since we only use it to profile processes in user mode and there is no way to get back user mode without going past the AST that will write out the profiling info in a context where copyout works. Sitting in my tree for ages. Reviewed and with some suggestions from nordin@
2002-06-07switch from AVL tree's to herr Provos' red-black treesMike Frantzen
with suggestions from provos@ ok dhartmei@
2002-06-07regen.Federico G. Schwindt
2002-06-07Call pf_test() from pf_route() to filter (and translate) routed packets,Daniel Hartmeier
too. Use mbuf tag to prevent loops. Suggested by Darren Reed. ok frantzen@
2002-06-07Gemplus GPR400 smartcard reader.Federico G. Schwindt
2002-06-07Add wsconsctl recognition support for adb keyboard.Dale Rahn
2002-06-07Extend as per current IANA assignmentsHakan Olsson
2002-06-07bus_dma-ify, now it works again, sorry for the inconvenienceNiklas Hallqvist
2002-06-07Also allocate space for the attribute header.Hakan Olsson
2002-06-07Add mbuf tag PACKET_TAG_PF_ROUTED, used to prevent loops for pf routedDaniel Hartmeier
packets. ok angelos@
2002-06-07do not propose IDEA cipher on SSL connection. tested by beckJun-ichiro itojun Hagino
noticed by Sverre Froyen <sverre@viewmark.com>
2002-06-07Start for support of IKECFG in SET/ACK mode. Server side only so far.Hakan Olsson
2002-06-07document $srcaddr/$srcport/$dstaddr/$dstport in rule labelsHenning Brauer
ok dhartmei@
2002-06-07allow using $srcaddr, $srcport, $dstaddr and $dstport in rule labels,Henning Brauer
evaluated at parse time. ok dhartmei@
2002-06-07add a way to exit from the 'root device' prompt if we haven't found ANY ↵Jason Wright
possibilities. Power cycling this machine is SLOW!
2002-06-07minor KNF while I'm hereHenning Brauer
ok dhartmei@
2002-06-07explain about permit[inherit] for execveNiels Provos
2002-06-07Engage brain before commiting...Hans Insulander
- remove false dependency when creating symlinks into source tree - add -f flag to ln to force recreation of the symlinks if the target would somehow be triggered ok maja@
2002-06-07- set_progname() no longer used in header-generating program.Hans Insulander
- remove my testing cruft accidentally commited - Add some files to CLEANFILES that were not properly cleaned.
2002-06-07Add an explicit dependency for two symlinked files, to make maja@'sHans Insulander
problems go away.
2002-06-07sync behaviour about DF bit between ip_output()/tcp_response()Philipp Buehler
and pf_send_reset() while sending a RST ok dhartmei@, itojun@, frantzen@
2002-06-07no more set_prognameHans Insulander
2002-06-07whoops. turn on the IPv6 scope testMike Frantzen
2002-06-07regress test IPv6 scopesMike Frantzen
2002-06-07Don't try to send a packet we don't have if rl_encap fails.Artur Grabowski
Tested by noone, the bug reporter didn't respond. could fix kernel/2731
2002-06-07Remove an unused variable.Hans Insulander
Spotted by deraadt@, synced with the Heimdal people.
2002-06-07There is absolutely no need to protect a reference to mono_time.tv_sec with ↵Artur Grabowski
splclock.
2002-06-07Move all duplicated enqueueing code into one function,jasoni
bridge_ifenqueu(). - ok jason@, dhartmei@
2002-06-07make IPv6 scope identification work for dst (from any to fe80::1%lo0)Jun-ichiro itojun Hagino
2002-06-07support scoped IPv6 address in from/to portion.Jun-ichiro itojun Hagino
2002-06-07typoJun-ichiro itojun Hagino
2002-06-07use profiling to order filter lists more optimally.Niels Provos
2002-06-07Switch powerpc to using new split (aout/elf) link.hDale Rahn