summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2006-08-30Make SA deletion on shutdown the default again. Use -S for failoverHans-Joerg Hoexer
situations where you do not want this. Discussed and agreed on with ho, mcbride, markus, cloder,... We will have to teach sasyncd to deal with this. Testing by msf and hshoexer with help from mtu ok markus cloder
2006-08-30Back out r1.103, which caused SA's to leak until memory was exhausted.Chad Loder
OK hshoexer, nathanael, mpf, "get that in" deraadt
2006-08-30cut down the examples; ok hshoexerJason McIntyre
2006-08-30partial backout of last commitMarkus Friedl
2006-08-30some tcp md5 bits;Jason McIntyre
2006-08-30comment out some comp stuff i missed earlier;Jason McIntyre
2006-08-30better wording for the key generation section;Jason McIntyre
2006-08-30kill more redundant text, and an oops;Jason McIntyre
2006-08-30remove some repeated text, and shuffle a little;Jason McIntyre
2006-08-30one more from ho;Jason McIntyre
2006-08-30correction; from hoJason McIntyre
2006-08-30knock out some redundant text; from hoJason McIntyre
2006-08-30put the PFS stuff in the right place;Jason McIntyre
from uwe werler; tweaks/ok hshoexer ho
2006-08-30actually use the right value for USER_FQDNMathieu Sauve-Frankel
ok hshoexer@
2006-08-30print extensions with type SADB_EXT_MAX, too; ok hshoexer, reyk, msfMarkus Friedl
2006-08-30knock out ipcomp for now;Jason McIntyre
2006-08-30put this page into a better structure orderJason McIntyre
(very little text change); from hshoexer and myself; ok everyone
2006-08-30allow DIOCNATLOOK to look up NAT states for protocols without portDamien Miller
numbers, reported by Raja Subramanian; ok henning@
2006-08-30Return from channel tuning code if we get IEEE80211_CHAN_ANYJonathan Gray
as per other drivers instead of doing panics. Should workaround PR 5206 which I could never manage to reproduce, though we really shouldn't be getting IEEE80211_CHAN_ANY here. ok deraadt@
2006-08-30do not call pf_key_v2_disable_sa twice; ok hshoexer, hoMarkus Friedl
2006-08-30U[Ss]tar -> ustar, as per posix and our pax docs;Jason McIntyre
from ross l richardson (pr #5216)
2006-08-30when determining the size of the volumes and disks we want how manyDavid Gwynne
bytes each of them has, not the number of kilobytes. this solves the "why am i dividing by 2" question. the answer is "you dont, you multiply by 512".
2006-08-30document that ftp-proxy cannot function at a raised securelevelCamiel Dobbelaar
ok jmc marco
2006-08-30Remove useless logging, the logged event happens all the time, no need toEsben Norby
spam the logs. ok claudio@ deraadt@
2006-08-30crank to 4.4Damien Miller
2006-08-30Fix regression where SSH2 banner is printed at loglevels ERROR and FATALDarren Tucker
where previously it weren't. bz #1221, found by Dean Kopesky, ok djm@
2006-08-29Test for an as yet unresolved problem:Christian Weisgerber
If list expansion produces peer pairings between different address families, this should be an error. Suggested by and ok hshoexer@
2006-08-29Fix KVM snooping code of netstat that got broken by the multiple tableClaudio Jeker
"support". This makes netstat -A work again. OK markus@ henning@
2006-08-29fix output location of truncated files testDavid Krause
ok niallo@ deraadt@
2006-08-29enable arc, ok deraadt@Jolan Luff
2006-08-29fix a typo. it's esyscmd, not esycmd.Marc Balmer
ok jmc
2006-08-29#undef I2C_VERBOSEMark Kettenis
ok deraadt@
2006-08-29ACKNOWLEDGEMENTS -> AUTHORS;Jason McIntyre
2006-08-29Fix handling of beacon frames by stations while they're associated.Damien Bergamini
Changes in the ERP information element and in the capinfo field were not detected properly, so the drivers were not able to adjust their settings (like short slot time, short preamble, protection mode etc...) dynamically. Should fix BSS mode with both 802.11b and 802.11g stations. ok reyk@
2006-08-29add support for ufqdn ids in ike rulesMathieu Sauve-Frankel
ok hshoexer@
2006-08-29make ic_stats.is_rx_tooshort statistic more accurate.Damien Bergamini
cosmetic tweaks. ok reyk@
2006-08-29remove some unhelpful Xrs; ok hshoexerJason McIntyre
2006-08-29Change the way ieee80211_fix_rate() handles the IEEE80211_F_DOFRATE flag.Damien Bergamini
Instead of removing the rates from the node's rate set, just check that the fixed rate is present in the rate set. Otherwise, the node will be marked non-ERP which will force the use of protection mode (either CTS-to-self or RTS/CTS) in an 802.11g network and degrade performance. This fixes HostAP mode for 11g with a fixed rate. Problem originally reported by Sam Fourman Jr. Code from FreeBSD. ok reyk@, "no objections here" jsg@
2006-08-29If pgrp is zero, the process ID of the specified process is used.Christian Weisgerber
ok jmc@
2006-08-29Add support for IKE AH rules to ipsecctl. Man page input by jmc@.Christian Weisgerber
ok hshoexer@
2006-08-29comment out ipcomp stuff for now; ok hshoexerJason McIntyre
2006-08-29Add support for onboard bge(4)'s on Sun UltraSPARC hardware that apparentlyMark Kettenis
come without an attached SEEPROM. ok deraadt@
2006-08-29increase the carp demotion counter by 128 instead of 1 while rc runs.Henning Brauer
you do not want a machine that is in the middle of rc and does not have all network daemons (that possibly increase the carp demotion counter further) to become master just because the other one lost 2 bgp sessions or similar for other daemons (esp sasyncd) and as such has a demotion count of >1. ok mcbride mpf deraadt
2006-08-29Don't panic when watchdog timeout is called.Marcus Glocker
formal ok deraadt@
2006-08-29move the NOTE section into the main body;Jason McIntyre
2006-08-29allow a numeric argument to "carpdemote" to in-/decrease the demotionHenning Brauer
counter by more than one. manpage help by jmc, ok mcbride mpf deraadt
2006-08-29allow the carp demotion counter to be changed by arbitary values as longHenning Brauer
as the resulting demotion counter value is in range. previously, we only allowed +/- 1. ok mpf mcbride deraadt
2006-08-29Reality check:Michael Knudsen
o Sync list of watchdog drivers in SEE ALSO o All watchdogs are now configured using sysctl o All watchdogs can thus be triggered from userland ok jmc
2006-08-29Work around a problem in Heimdal that occurs when KRB5CCNAME file isDarren Tucker
missing, by checking whether or not kerberos allocated us a context before attempting to free it. Patch from Simon Wilkinson, tested by biorn@, ok djm@
2006-08-29normalise some inconsistent (but harmless) NULL pointer checksDamien Miller
spotted by the Stanford SATURN tool, via Isil Dillig; ok markus@ deraadt@