Age | Commit message (Collapse) | Author | |
---|---|---|---|
2007-11-21 | rename the "url" filter action to "query" to use the correct term. | Reyk Floeter | |
please update your hoststated.conf configurations. also add more examples to the manpage. alright pyr@ | |||
2007-11-21 | back out previous: henning says it's wrong; | Jason McIntyre | |
2007-11-21 | allow the http digest type to be either SHA1 or MD5 determined by the | Reyk Floeter | |
digest string length; it is compatible to any existing SHA1-only configurations. ok pyr@ gilles@ | |||
2007-11-21 | more work on the "filter" action: close the connection instantly when | Reyk Floeter | |
receiving a filtered entity, fix some remaining issues. | |||
2007-11-21 | document the fact that port can be specified in table statements inside | Pierre-Yves Ritschard | |
service sections. ok reyk@ | |||
2007-11-21 | document hoststatectl poll. | Pierre-Yves Ritschard | |
prompted by reyk@ | |||
2007-11-21 | make sure all hosts are checked when hoststatectl poll is issued, now | Pierre-Yves Ritschard | |
that check interval can differ from table to table. ok reyk@ | |||
2007-11-21 | note that -q is the default if no other options are specified; ok dlg | Jason McIntyre | |
2007-11-21 | Fix grammar, pointed out by Jim Razmus and RW. | Ray Lai | |
OK jmc. | |||
2007-11-20 | A line got lost while hand-editing diffs... | Miod Vallat | |
2007-11-20 | On 88110, use a shorter path in pmap_is_modified(), since we perform | Miod Vallat | |
accurate mod tracking through the write fault traps; there is no need to walk the pv list since, unlike on 88200, hardware does not set PG_M or PG_U in page table entries. | |||
2007-11-20 | Move 88110 trap-on-write processing from two duplicated sections in trap.c to | Miod Vallat | |
a single function in pmap.c, which will do the right thing and also perform mod/ref vm_page flags accounting. | |||
2007-11-20 | Fix MP locking issues when processing data access faults on 88110, similar | Miod Vallat | |
to the fix already applied to 88100. | |||
2007-11-20 | Overhaul of the pmap debug messages. They now provide slightly better | Miod Vallat | |
information, and are easier to parse. While there, a few never-happening checks move from option DIAGNOSTIC to option PMAPDEBUG. | |||
2007-11-20 | Fix setregs() on 88110, so that binaries do not skip their first instruction. | Miod Vallat | |
Makes binaries beyond init(8) running on MVME197, to some extent. | |||
2007-11-20 | In data_access_emulation(), make sure that if we want the pipeline replay | Miod Vallat | |
to be disabled, this effectively disables the three slots, instead of only the first. This will only make (rare) things faster. | |||
2007-11-20 | the extra stuff also needs stmp-dirs, as found out by naddy@ | Marc Espie | |
2007-11-20 | Fix possible mbuf leak on error. ok reyk@ | Can Erkin Acar | |
2007-11-20 | make pthread vfork() not call fork(), but actually call vfork(). our | Theo de Raadt | |
vfork() has only one semantic: "parent stalls until child does execve or exit" and no other semantic. it is unfair to act as if pthread vfork() suddenly lacks that semantic. ok kurt millert kettenis beck | |||
2007-11-20 | tweak previous; | Jason McIntyre | |
2007-11-20 | limit the number of displayed lines per node in relay_protodebug(). | Reyk Floeter | |
2007-11-20 | allow to use the "include" directive in tables, services, relays, and | Reyk Floeter | |
protocols. ok pyr@ | |||
2007-11-20 | it may be desirable to send a HTTP error page with error code and a | Reyk Floeter | |
meaningful message if a HTTP/HTTPS relay closes the connection for some reason. for example, a "403 Forbidden" if the request was rejected by a filter. this will be enabled with the "return error" option and is disabled by default, the standard behaviour is to silently drop the connection; the browser may display an empty page in this case. the look+feel of the HTTP error page can be customized with a CSS style sheet, but we do not intend to allow customization of the error page contents (hoststated is not a webserver!). ok pyr@ | |||
2007-11-20 | Allow overriding the global interval in a table. | Pierre-Yves Ritschard | |
Table specific intervals must be multiples of the global interval. help and ok reyk@ | |||
2007-11-20 | NULL != NONE (but both equal 0) | Pierre-Yves Ritschard | |
2007-11-20 | another fix to handle "expect" and "filter" actions in the new style | Reyk Floeter | |
correctly. ok pyr@ | |||
2007-11-20 | remove "unused variable" warning | Charles Longeau | |
ok kettenis@ | |||
2007-11-20 | bump table name size. | Pierre-Yves Ritschard | |
ok reyk@ | |||
2007-11-20 | spacing | Reyk Floeter | |
2007-11-20 | minor change to some relay log messages | Reyk Floeter | |
2007-11-20 | comment for spamd_flags should refer to spamd(8); | Jason McIntyre | |
pointed out by Daniel Wade and previously by Frank Bax; this time ok beck | |||
2007-11-19 | armish and zaurus too | Theo de Raadt | |
2007-11-19 | Pull from master repo: | Stefan Kempf | |
>Fix type conversion problems observed by stefan@ >Some other typos too. and >- Add rules for conversion from (u)long long to (u){char,short,int} >- Fix loading ushorts from mem. They don't need to be sign-extended. >- Fix a rule that didn't load small negative 64-bit values into > registers correctly (there's at least one more of it left). >- Add $Id$ > >ok gmcgarry, otto | |||
2007-11-19 | copy in FILES from pw_lock.3 to vipw.8: as nick points out, it should at | Jason McIntyre | |
least document /etc/ptmp; while i'm at it, might as well tidy it up and make it consistent across these pages; | |||
2007-11-19 | 802.11 radiotap + various tweaks | Damien Bergamini | |
2007-11-19 | do not hardcode make | Marc Espie | |
2007-11-19 | pairwise keys always have an ID equal to 0. | Damien Bergamini | |
2007-11-19 | all TX rings have the same fixed size (256 entries) and this is not | Damien Bergamini | |
configurable so simplify rings allocation a bit. | |||
2007-11-19 | sigh, amd64 still uses that stupid acpi_enabled variable... | Theo de Raadt | |
2007-11-19 | softc's come initialized to 0, you know... | Theo de Raadt | |
2007-11-19 | store revision; from jsg | Theo de Raadt | |
2007-11-19 | supply a place to store acpi version; from jsg | Theo de Raadt | |
2007-11-19 | Initialize sc_facs earlier. | Mark Kettenis | |
ok deraadt@, beck@, canacar@ | |||
2007-11-19 | Don't overwrite a core file owned by a different user. Makes the code | Todd C. Miller | |
match the comment. OK deraadt@ | |||
2007-11-19 | spacing | Reyk Floeter | |
2007-11-19 | knf (replace some ';;' with a single ';') | Reyk Floeter | |
2007-11-19 | Update the transparent HTTP proxy example: | Reyk Floeter | |
Include filters to block some well-known instant messengers; thanks to Rene Badalassi (rene at cybersecure dot com dot au) for providing the examples. (This change depends on my latest fix to hoststated) | |||
2007-11-19 | do not print "Processing config {dir,file} ...." messages unless the -t | Robert Nagy | |
or -T option is specified, which is only going to do a syntax check on the config file(s) ok henning@, deraadt@ | |||
2007-11-19 | rework the internal handling of protocol actions a little bit: | Reyk Floeter | |
- allow to use a key for multiple times by appending a queue of additional matches to the tree node. for example, this allows to specify multiple "expect" or "filter" actions to white-/black-list a list of HTTP-headers, URLs, .. - prevent specifing an HTTP header for multiple times when using the expect action. - minor code shuffling | |||
2007-11-19 | always enable "late connect" relay mode if an "expect" or "filter" | Reyk Floeter | |
action has been specified for the protocol. late connect mode first reads the complete request (HTTP header) before opening the inbound connection instead of relaying it line-by-line. |