summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2009-04-17clarify that even internal-sftp needs /dev/log for logging to work; okKevin Steves
markus@
2009-04-17use INTERNAL_SFTP_NAME for setproctitle() of in-process sftp-server;Kevin Steves
ok djm@ markus@
2009-04-17move the lastr = r assignment behind the anchor rule check so we don'tHenning Brauer
ever try to aplly options from the anchor rule if it was the last matching one but the last matching real rule. it is right but despite begging nobody has the balls to ok it ;(
2009-04-17a scrub was hiding here when nfs was enabled. since we want the no-dfHenning Brauer
behaviour here replace by an explicit set reassemble yes no-df. noticed by Valery Masiutsin <val.masutin at gmail dot com>
2009-04-17handle case when no input is provided, fixes confusing error:Jacek Masiulaniec
$ echo -n | sendmail root sendmail: write: connection closed $
2009-04-17cannot create a hash for bsd.rd, obviously. well, some media could sinceTheo de Raadt
they have their own bsd.rd, but not not bsd.rd or installXX.iso, so punt on this.
2009-04-17silence delete of hash output fileTheo de Raadt
2009-04-17further minor unificationTheo de Raadt
2009-04-17syncTheo de Raadt
2009-04-17bpf0 can be created by MAKEDEV; ok krwTheo de Raadt
2009-04-17Remove unused function proc_isunder()Bret Lambert
"go for it" tedu@
2009-04-17- enable libstdc++ pthread regressesKurt Miller
- fix g++ regress so it can find libstdc++ in the objdir okay espie@ kettenis@
2009-04-17Add device ranking support for future sleep/wake developments.Paul Irofti
okay marco@
2009-04-17Correctly handle packets that are leaving the MPLS cloud andMichele Marchetto
joining the ipv4/ipv6 stack. Get also rid of the dependency on mpe(4) for packets not belonging to VPN traffic. ok laurent@, ok and input claudio@
2009-04-17close filedescriptors with closefrom(STDERR_FILENO + 1) before executingReyk Floeter
the script to prevent access to internal processes. From jacekm@
2009-04-17keep the parent relations of hosts after reloading the configuration.Reyk Floeter
From Camiel Dobbelaar, closes PR 6066
2009-04-17add "Connection: close" to HTTP check headers to deconfuse HTTP/1.1Reyk Floeter
servers claiming keepalive sessions. From Camiel Dobbelaar
2009-04-17further steps towards unificationTheo de Raadt
2009-04-17er, wrong pathTheo de Raadt
2009-04-17more syncronization steps..Theo de Raadt
2009-04-17Another case of locking just to read uvmexp.free. Kill the locking, notOwain Ainsworth
needed. "of course" art@.
2009-04-17unify some more piecesTheo de Raadt
2009-04-17undesireable tabs (waste space on the media)Theo de Raadt
2009-04-17tweak PACKET FILTERING;Jason McIntyre
2009-04-17remove some junkTheo de Raadt
2009-04-17bye bye md5Theo de Raadt
2009-04-17For SHA256 hashes to be ready to go onto the install media, we mustTheo de Raadt
build the sets before we build the media. While there we can get rid of DESTDIR/snapshot too, and simply install straight into RELEASEDIR. (This also ends up saving an astounding amount of traffic/latency in a nfs environment)
2009-04-17Put bin/sha256 and build a hash directory onto the media that can fitTheo de Raadt
them
2009-04-17we now ship SHA256 files, not MD5 filesTheo de Raadt
2009-04-17all the install media now have a /var/hash directoryTheo de Raadt
2009-04-17A new directive HASH, which fills a a hash directory (on the media)Theo de Raadt
with the SHA256 hashes of the various install sets
2009-04-17A very small sha256 program for the base media. Use it by piping dataTheo de Raadt
through it... input | sha256 outfile | output, then check the contents of outfile after.
2009-04-17Pull sha2.c from libc into libstubs, but compile it with -DSHA256_ONLYTheo de Raadt
so that it is a lot smaller.
2009-04-16Change some parameter types from int to u_int8_t since theMichael Knudsen
bus_space_.. API uses that.
2009-04-16fix a few more typos found by spell(1); rectify a double "with" pointed outIgor Sobrado
by jmc@ while looking at this diff. ok jmc@, reyk@ (for the hostapd part)
2009-04-16Notify the rde when a neighbor goes down.Michele Marchetto
When this happens we have to rebuild the list of downstream interfaces. ok claudio@
2009-04-16make TKIP TSC start at 1 (instead of 0) to match the standard.Damien Bergamini
many implementations (including ours) will drop frames with a TSC equal to 0 (they are considered replayed frames.)
2009-04-16Update kernel forwarding informations when a neighbor reports we areMichele Marchetto
its nexthop to a particular multicast source. ok claudio@
2009-04-16syncTheo de Raadt
2009-04-16Total rewrite of the sendmail interface. Adds support for -t, -v,Jacek Masiulaniec
and -F cmdline args. Also, date and Message-Id headers are added when missing. The main trouble with the current enqueue code is that it requires dealing with problems in the control process that are already solved in the smtp process, ie. duplicating a lot of code which interacts with untrusted clients. This diff solves this by making sendmail obtain a SMTP socket from smtp via smtpd.sock, and using that socket to deliver the message. For smtpd it looks as if connection was made from the network, only difference being the F_MESSAGE_ENQUEUED message flag, handy when differentation between local and remote deliveries is wanted. Most of the features come from the femail program, created by henning@. Additional testing by Nigel J. Taylor. ok gilles@, henning@ happy with smtpd using femail code
2009-04-16Update SMART attributes list. From kirill.timofeev@gmail.com.Alexander Yurchenko
2009-04-16tweak TRANSLATION;Jason McIntyre
2009-04-16Really turn fragment reassembly on by default. pfctl must handle thisDavid Krause
since the DIOCSETREASS ioctl is called on every ruleset load and was overriding the initial setting in pfattach(). Fix setting of the global no-df bitmask as well. ok henning@
2009-04-15The current iommu code only touches the hardware if the bios did notOwain Ainsworth
enable it (I have found the code that does enable it problematic on quite a few machines, however, that's a different issue). So provide some code that so if the bios initialised the iommu for us, we'll use what it gave us. Makes iommu work on a machine of todd's. while i'm here, we don't need to scan all pci functoins to find the hypertransport bridge. the gart is always on function 3, so just scan for all the bridges and not iterate over the functions too. Thanks to todd for his infinite patience while I gave him diffs that went ``Boom!''.
2009-04-15don't call setproctitle for parent, at least one process shouldJacek Masiulaniec
display cmdline arguments the daemon was started with; ok gilles@
2009-04-15s/ssmtp/smtps/; ok gilles@Jacek Masiulaniec
2009-04-15Remove some unused symbolic constants.Michael Knudsen
2009-04-15Replace variadic macros with real functions, so that this compiles onMiod Vallat
platforms still using gcc 2. ok deraadt@
2009-04-15fix a bug where after all MX-es were found to be non-contactable,Jacek Masiulaniec
smtpd would treat the delivery as successful; ok gilles@
2009-04-15Disable DEBUG now, it floods too much information.Miod Vallat