summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2007-11-21rename the "url" filter action to "query" to use the correct term.Reyk Floeter
please update your hoststated.conf configurations. also add more examples to the manpage. alright pyr@
2007-11-21back out previous: henning says it's wrong;Jason McIntyre
2007-11-21allow the http digest type to be either SHA1 or MD5 determined by theReyk Floeter
digest string length; it is compatible to any existing SHA1-only configurations. ok pyr@ gilles@
2007-11-21more work on the "filter" action: close the connection instantly whenReyk Floeter
receiving a filtered entity, fix some remaining issues.
2007-11-21document the fact that port can be specified in table statements insidePierre-Yves Ritschard
service sections. ok reyk@
2007-11-21document hoststatectl poll.Pierre-Yves Ritschard
prompted by reyk@
2007-11-21make sure all hosts are checked when hoststatectl poll is issued, nowPierre-Yves Ritschard
that check interval can differ from table to table. ok reyk@
2007-11-21note that -q is the default if no other options are specified; ok dlgJason McIntyre
2007-11-21Fix grammar, pointed out by Jim Razmus and RW.Ray Lai
OK jmc.
2007-11-20A line got lost while hand-editing diffs...Miod Vallat
2007-11-20On 88110, use a shorter path in pmap_is_modified(), since we performMiod Vallat
accurate mod tracking through the write fault traps; there is no need to walk the pv list since, unlike on 88200, hardware does not set PG_M or PG_U in page table entries.
2007-11-20Move 88110 trap-on-write processing from two duplicated sections in trap.c toMiod Vallat
a single function in pmap.c, which will do the right thing and also perform mod/ref vm_page flags accounting.
2007-11-20Fix MP locking issues when processing data access faults on 88110, similarMiod Vallat
to the fix already applied to 88100.
2007-11-20Overhaul of the pmap debug messages. They now provide slightly betterMiod Vallat
information, and are easier to parse. While there, a few never-happening checks move from option DIAGNOSTIC to option PMAPDEBUG.
2007-11-20Fix setregs() on 88110, so that binaries do not skip their first instruction.Miod Vallat
Makes binaries beyond init(8) running on MVME197, to some extent.
2007-11-20In data_access_emulation(), make sure that if we want the pipeline replayMiod Vallat
to be disabled, this effectively disables the three slots, instead of only the first. This will only make (rare) things faster.
2007-11-20the extra stuff also needs stmp-dirs, as found out by naddy@Marc Espie
2007-11-20Fix possible mbuf leak on error. ok reyk@Can Erkin Acar
2007-11-20make pthread vfork() not call fork(), but actually call vfork(). ourTheo de Raadt
vfork() has only one semantic: "parent stalls until child does execve or exit" and no other semantic. it is unfair to act as if pthread vfork() suddenly lacks that semantic. ok kurt millert kettenis beck
2007-11-20tweak previous;Jason McIntyre
2007-11-20limit the number of displayed lines per node in relay_protodebug().Reyk Floeter
2007-11-20allow to use the "include" directive in tables, services, relays, andReyk Floeter
protocols. ok pyr@
2007-11-20it may be desirable to send a HTTP error page with error code and aReyk Floeter
meaningful message if a HTTP/HTTPS relay closes the connection for some reason. for example, a "403 Forbidden" if the request was rejected by a filter. this will be enabled with the "return error" option and is disabled by default, the standard behaviour is to silently drop the connection; the browser may display an empty page in this case. the look+feel of the HTTP error page can be customized with a CSS style sheet, but we do not intend to allow customization of the error page contents (hoststated is not a webserver!). ok pyr@
2007-11-20Allow overriding the global interval in a table.Pierre-Yves Ritschard
Table specific intervals must be multiples of the global interval. help and ok reyk@
2007-11-20NULL != NONE (but both equal 0)Pierre-Yves Ritschard
2007-11-20another fix to handle "expect" and "filter" actions in the new styleReyk Floeter
correctly. ok pyr@
2007-11-20remove "unused variable" warningCharles Longeau
ok kettenis@
2007-11-20bump table name size.Pierre-Yves Ritschard
ok reyk@
2007-11-20spacingReyk Floeter
2007-11-20minor change to some relay log messagesReyk Floeter
2007-11-20comment for spamd_flags should refer to spamd(8);Jason McIntyre
pointed out by Daniel Wade and previously by Frank Bax; this time ok beck
2007-11-19armish and zaurus tooTheo de Raadt
2007-11-19Pull from master repo:Stefan Kempf
>Fix type conversion problems observed by stefan@ >Some other typos too. and >- Add rules for conversion from (u)long long to (u){char,short,int} >- Fix loading ushorts from mem. They don't need to be sign-extended. >- Fix a rule that didn't load small negative 64-bit values into > registers correctly (there's at least one more of it left). >- Add $Id$ > >ok gmcgarry, otto
2007-11-19copy in FILES from pw_lock.3 to vipw.8: as nick points out, it should atJason McIntyre
least document /etc/ptmp; while i'm at it, might as well tidy it up and make it consistent across these pages;
2007-11-19802.11 radiotap + various tweaksDamien Bergamini
2007-11-19do not hardcode makeMarc Espie
2007-11-19pairwise keys always have an ID equal to 0.Damien Bergamini
2007-11-19all TX rings have the same fixed size (256 entries) and this is notDamien Bergamini
configurable so simplify rings allocation a bit.
2007-11-19sigh, amd64 still uses that stupid acpi_enabled variable...Theo de Raadt
2007-11-19softc's come initialized to 0, you know...Theo de Raadt
2007-11-19store revision; from jsgTheo de Raadt
2007-11-19supply a place to store acpi version; from jsgTheo de Raadt
2007-11-19Initialize sc_facs earlier.Mark Kettenis
ok deraadt@, beck@, canacar@
2007-11-19Don't overwrite a core file owned by a different user. Makes the codeTodd C. Miller
match the comment. OK deraadt@
2007-11-19spacingReyk Floeter
2007-11-19knf (replace some ';;' with a single ';')Reyk Floeter
2007-11-19Update the transparent HTTP proxy example:Reyk Floeter
Include filters to block some well-known instant messengers; thanks to Rene Badalassi (rene at cybersecure dot com dot au) for providing the examples. (This change depends on my latest fix to hoststated)
2007-11-19do not print "Processing config {dir,file} ...." messages unless the -tRobert Nagy
or -T option is specified, which is only going to do a syntax check on the config file(s) ok henning@, deraadt@
2007-11-19rework the internal handling of protocol actions a little bit:Reyk Floeter
- allow to use a key for multiple times by appending a queue of additional matches to the tree node. for example, this allows to specify multiple "expect" or "filter" actions to white-/black-list a list of HTTP-headers, URLs, .. - prevent specifing an HTTP header for multiple times when using the expect action. - minor code shuffling
2007-11-19always enable "late connect" relay mode if an "expect" or "filter"Reyk Floeter
action has been specified for the protocol. late connect mode first reads the complete request (HTTP header) before opening the inbound connection instead of relaying it line-by-line.