Age | Commit message (Collapse) | Author | |
---|---|---|---|
2006-08-30 | Make SA deletion on shutdown the default again. Use -S for failover | Hans-Joerg Hoexer | |
situations where you do not want this. Discussed and agreed on with ho, mcbride, markus, cloder,... We will have to teach sasyncd to deal with this. Testing by msf and hshoexer with help from mtu ok markus cloder | |||
2006-08-30 | Back out r1.103, which caused SA's to leak until memory was exhausted. | Chad Loder | |
OK hshoexer, nathanael, mpf, "get that in" deraadt | |||
2006-08-30 | cut down the examples; ok hshoexer | Jason McIntyre | |
2006-08-30 | partial backout of last commit | Markus Friedl | |
2006-08-30 | some tcp md5 bits; | Jason McIntyre | |
2006-08-30 | comment out some comp stuff i missed earlier; | Jason McIntyre | |
2006-08-30 | better wording for the key generation section; | Jason McIntyre | |
2006-08-30 | kill more redundant text, and an oops; | Jason McIntyre | |
2006-08-30 | remove some repeated text, and shuffle a little; | Jason McIntyre | |
2006-08-30 | one more from ho; | Jason McIntyre | |
2006-08-30 | correction; from ho | Jason McIntyre | |
2006-08-30 | knock out some redundant text; from ho | Jason McIntyre | |
2006-08-30 | put the PFS stuff in the right place; | Jason McIntyre | |
from uwe werler; tweaks/ok hshoexer ho | |||
2006-08-30 | actually use the right value for USER_FQDN | Mathieu Sauve-Frankel | |
ok hshoexer@ | |||
2006-08-30 | print extensions with type SADB_EXT_MAX, too; ok hshoexer, reyk, msf | Markus Friedl | |
2006-08-30 | knock out ipcomp for now; | Jason McIntyre | |
2006-08-30 | put this page into a better structure order | Jason McIntyre | |
(very little text change); from hshoexer and myself; ok everyone | |||
2006-08-30 | allow DIOCNATLOOK to look up NAT states for protocols without port | Damien Miller | |
numbers, reported by Raja Subramanian; ok henning@ | |||
2006-08-30 | Return from channel tuning code if we get IEEE80211_CHAN_ANY | Jonathan Gray | |
as per other drivers instead of doing panics. Should workaround PR 5206 which I could never manage to reproduce, though we really shouldn't be getting IEEE80211_CHAN_ANY here. ok deraadt@ | |||
2006-08-30 | do not call pf_key_v2_disable_sa twice; ok hshoexer, ho | Markus Friedl | |
2006-08-30 | U[Ss]tar -> ustar, as per posix and our pax docs; | Jason McIntyre | |
from ross l richardson (pr #5216) | |||
2006-08-30 | when determining the size of the volumes and disks we want how many | David Gwynne | |
bytes each of them has, not the number of kilobytes. this solves the "why am i dividing by 2" question. the answer is "you dont, you multiply by 512". | |||
2006-08-30 | document that ftp-proxy cannot function at a raised securelevel | Camiel Dobbelaar | |
ok jmc marco | |||
2006-08-30 | Remove useless logging, the logged event happens all the time, no need to | Esben Norby | |
spam the logs. ok claudio@ deraadt@ | |||
2006-08-30 | crank to 4.4 | Damien Miller | |
2006-08-30 | Fix regression where SSH2 banner is printed at loglevels ERROR and FATAL | Darren Tucker | |
where previously it weren't. bz #1221, found by Dean Kopesky, ok djm@ | |||
2006-08-29 | Test for an as yet unresolved problem: | Christian Weisgerber | |
If list expansion produces peer pairings between different address families, this should be an error. Suggested by and ok hshoexer@ | |||
2006-08-29 | Fix KVM snooping code of netstat that got broken by the multiple table | Claudio Jeker | |
"support". This makes netstat -A work again. OK markus@ henning@ | |||
2006-08-29 | fix output location of truncated files test | David Krause | |
ok niallo@ deraadt@ | |||
2006-08-29 | enable arc, ok deraadt@ | Jolan Luff | |
2006-08-29 | fix a typo. it's esyscmd, not esycmd. | Marc Balmer | |
ok jmc | |||
2006-08-29 | #undef I2C_VERBOSE | Mark Kettenis | |
ok deraadt@ | |||
2006-08-29 | ACKNOWLEDGEMENTS -> AUTHORS; | Jason McIntyre | |
2006-08-29 | Fix handling of beacon frames by stations while they're associated. | Damien Bergamini | |
Changes in the ERP information element and in the capinfo field were not detected properly, so the drivers were not able to adjust their settings (like short slot time, short preamble, protection mode etc...) dynamically. Should fix BSS mode with both 802.11b and 802.11g stations. ok reyk@ | |||
2006-08-29 | add support for ufqdn ids in ike rules | Mathieu Sauve-Frankel | |
ok hshoexer@ | |||
2006-08-29 | make ic_stats.is_rx_tooshort statistic more accurate. | Damien Bergamini | |
cosmetic tweaks. ok reyk@ | |||
2006-08-29 | remove some unhelpful Xrs; ok hshoexer | Jason McIntyre | |
2006-08-29 | Change the way ieee80211_fix_rate() handles the IEEE80211_F_DOFRATE flag. | Damien Bergamini | |
Instead of removing the rates from the node's rate set, just check that the fixed rate is present in the rate set. Otherwise, the node will be marked non-ERP which will force the use of protection mode (either CTS-to-self or RTS/CTS) in an 802.11g network and degrade performance. This fixes HostAP mode for 11g with a fixed rate. Problem originally reported by Sam Fourman Jr. Code from FreeBSD. ok reyk@, "no objections here" jsg@ | |||
2006-08-29 | If pgrp is zero, the process ID of the specified process is used. | Christian Weisgerber | |
ok jmc@ | |||
2006-08-29 | Add support for IKE AH rules to ipsecctl. Man page input by jmc@. | Christian Weisgerber | |
ok hshoexer@ | |||
2006-08-29 | comment out ipcomp stuff for now; ok hshoexer | Jason McIntyre | |
2006-08-29 | Add support for onboard bge(4)'s on Sun UltraSPARC hardware that apparently | Mark Kettenis | |
come without an attached SEEPROM. ok deraadt@ | |||
2006-08-29 | increase the carp demotion counter by 128 instead of 1 while rc runs. | Henning Brauer | |
you do not want a machine that is in the middle of rc and does not have all network daemons (that possibly increase the carp demotion counter further) to become master just because the other one lost 2 bgp sessions or similar for other daemons (esp sasyncd) and as such has a demotion count of >1. ok mcbride mpf deraadt | |||
2006-08-29 | Don't panic when watchdog timeout is called. | Marcus Glocker | |
formal ok deraadt@ | |||
2006-08-29 | move the NOTE section into the main body; | Jason McIntyre | |
2006-08-29 | allow a numeric argument to "carpdemote" to in-/decrease the demotion | Henning Brauer | |
counter by more than one. manpage help by jmc, ok mcbride mpf deraadt | |||
2006-08-29 | allow the carp demotion counter to be changed by arbitary values as long | Henning Brauer | |
as the resulting demotion counter value is in range. previously, we only allowed +/- 1. ok mpf mcbride deraadt | |||
2006-08-29 | Reality check: | Michael Knudsen | |
o Sync list of watchdog drivers in SEE ALSO o All watchdogs are now configured using sysctl o All watchdogs can thus be triggered from userland ok jmc | |||
2006-08-29 | Work around a problem in Heimdal that occurs when KRB5CCNAME file is | Darren Tucker | |
missing, by checking whether or not kerberos allocated us a context before attempting to free it. Patch from Simon Wilkinson, tested by biorn@, ok djm@ | |||
2006-08-29 | normalise some inconsistent (but harmless) NULL pointer checks | Damien Miller | |
spotted by the Stanford SATURN tool, via Isil Dillig; ok markus@ deraadt@ |