summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2008-05-07Move i386 to __HAVE_GENERIC_SOFT_INTERRUPTSMark Kettenis
ok dlg@, tested by dlg@, oga@, jsg@, deraadt@
2008-05-07oops, forgot to remove vfc_mountroot from vfsconf for real.Thordur I. Bjornsson
2008-05-07remove the vfc_mountroot member from vfsconf andThordur I. Bjornsson
do appropriate cleanup; OK deraadt@
2008-05-07syncTheo de Raadt
2008-05-07enable tx mitigation when putting packets on the wire by switching fromDavid Gwynne
calls to ifp->if_start to if_start(). these are the obviously right cases where we can do that, the less obvious ones may follow as theyre figured out. deraadt@ said to go for it
2008-05-07syncTheo de Raadt
2008-05-07syncTheo de Raadt
2008-05-07Add MPLS support to loopback.Esben Norby
Makes it possible to do evil tricks locally. ok claudio@
2008-05-07OSPF uses the highest IP address, not the lowest.Joel Sing
hai norby@
2008-05-07Add synchronisation support for dhcpd - this allows for two dhcpd'sBob Beck
with the same configuration to be run on the same net and they will keep their lease files/state in synch, and therefore allowing you to run redundant dhcpd's. Synchronization code stolen from spamd, uses an hmac key in /var/db/dhcpd.key if it exists. ok krw@ deraadt@
2008-05-07Ref to ripd instead of routed.Claudio Jeker
2008-05-07Remove .Xr to routed and reword the sentence a bit to make more sense.Claudio Jeker
pppd can filter on network protocols not network daemons. OK norby@
2008-05-07routed is no more so use dhcpd in these examples instead. OK norby@Claudio Jeker
2008-05-07More .Xr routed removes. Add the other routing daemons to netintro instead.Claudio Jeker
2008-05-07routed is no longer, use ripd instead.Claudio Jeker
2008-05-07Remove references to routed.Claudio Jeker
2008-05-07RIP routed.Claudio Jeker
You were a nice thing in the 4.2BSD times but now it is time for you to go. Superseded by the shiny privseped ripd that does not have the evil habit to use kernel internals in userland. OK everybody in the onsen 'cause it unbreaks the tree
2008-05-07unlink routed. unbreaks the tree (it is obvious claudio has it removed inHenning Brauer
his tree already)
2008-05-07check TIOCSIG for 0 and do not send that to psignal() and pgsignal()Theo de Raadt
ok fgsch
2008-05-07remove duplicates; remove des_random_key; remove unused; sort MLINKS; ok jmc@Markus Friedl
2008-05-07check if the received buffer of a sync element is even big enough toReyk Floeter
hold the header with length field. ok deraadt@ beck@
2008-05-07Missing return and correctly indent a debug printf.Claudio Jeker
2008-05-07do not assume PF_INOUT is 0 in the enum; ok mcbrideTheo de Raadt
2008-05-07add mpe_input() to be able to be fed packets that will reenter ip.Pierre-Yves Ritschard
no consumers yet, they should come soon. ok norby@
2008-05-07sort;Jason McIntyre
2008-05-07scrub allows tagged, tooMarkus Friedl
2008-05-07Make mpe a point-to-point interface.Pierre-Yves Ritschard
Make the mtu user definable. ok claudio@
2008-05-07tweak previous;Jason McIntyre
2008-05-07put the mpe bits in the right place;Jason McIntyre
2008-05-07scrub packets based on tags; ok henningMarkus Friedl
2008-05-07Correctly initialize labels by byte-swapping and inserting BoS and TTL.Pierre-Yves Ritschard
While there bump MTU to 1500 and set the receiving interface before calling mpls_input. mpestart will eventually call mpls_output when it exists. ``yaaaaayyy'' and ok claudio@ and norby@
2008-05-07push the sshd_config bits in, spotted by ajacoutot@Pierre-Yves Ritschard
2008-05-07Document -priority. looks good norby@Claudio Jeker
2008-05-07allow setting TOS with scrub; ok mcbride, claudioMarkus Friedl
2008-05-07backout last change, it's already there....Markus Friedl
2008-05-07Add support to show and modify rtm_priority.Claudio Jeker
2008-05-07Prevent virtual interfaces from adding to the random pool.Marco Pfatschbacher
Also move the sampling into ether_input() where it can happen at the interrupt and not within splnet() processing, which might be less random. Discussed with mickey. OK markus@, mcbride@
2008-05-07Enable the AllowAgentForwarding option in sshd_config (global and matchPierre-Yves Ritschard
context), to specify if agents should be permitted on the server. As the man page states: ``Note that disabling Agent forwarding does not improve security unless users are also denied shell access, as they can always install their own forwarders.'' ok djm@, ok and a mild frown markus@
2008-05-07Implement routing priorities. Every route inserted has a priority assignedClaudio Jeker
and the one route with the lowest number wins. This will be used by the routing daemons to resolve the synchronisations issue in case of conflicts. The nasty bits of this are in the multipath code. If no priority is specified the kernel will choose an appropriate priority. Looked at by a few people at n2k8 code is much older
2008-05-07syncTheo de Raadt
2008-05-07no Xr isesTheo de Raadt
2008-05-07Rather than fixing ises(4), nuke it.Kenneth R Westerback
ok deraadt@
2008-05-07Rather than fixing ises(4), nuke it.Kenneth R Westerback
ok deraadt@
2008-05-07Redo rev 1.8 but this time with an additional fix to solve the dhclient crashesClaudio Jeker
seen by krw. This is a prerequisite for upcomming routing priorities: Always compare the nexthop if one is specified even if it is a non-multipath route. This mostly affects "route delete" and it will not remove the last route if previous delete is redone. OK henning@
2008-05-07Rather than fixing ises(4), nuke it.Kenneth R Westerback
ok deraadt@
2008-05-07Document the new mpe interface and explain the appropriate commandsPierre-Yves Ritschard
in ifconfig(8). The man pages reference mpls(8) which doesn't exist, but claudio promises it will follow shortly. a thumb up and ok from claudio@
2008-05-07Rather than fixing ises(4), nuke it.Kenneth R Westerback
ok deraadt@
2008-05-07There is no reason to have a faithrtrequest() function that sets the MTU toClaudio Jeker
route MTU to the interface MTU. By default if no route MTU is set it will fall back to the interface MTU anyway. OK henning@
2008-05-07add an alternative "route to" mode to relayd redirections which mapsReyk Floeter
to pf route-to instead of the default rdr. it is a first steps towards support for "direct server return" (dsr), an asynchronous mode where the load balanced servers send the replies to a different gateway like a l3 switch/router to handle higher amounts of return traffic. because the state handling in pf isn't optimal for this case yet, it just sees half of the TCP connection, the sessions are forced to time out after fixed number of seconds. discussed with many, thought about in the onsen
2008-05-06- move some services from unofficial to the Assigned Numbers section,Stuart Henderson
including some "cleverly" positioned in the dynamic range :( - add a couple of services relating to some ports/packages which otherwise need a manual change to this file looks good to ajacoutot, steven. suggestions/ok deraadt