| Age | Commit message (Collapse) | Author |
|---|
|
ok benno@ deraadt@
|
|
From Raf Czlonka
|
|
Globally anycasted 6to4 has outlived its usefulness.
Operational discussion: http://seclists.org/nanog/2018/Jun/268
OK deraadt@
|
|
"root strip" was semantically incorrect and did cause some confusion
as it never stripped the root but the client's request path.
Discussed with many. Heads up: this is a grammar change that also
affects acme-client(1) configurations (see current.html).
OK claudio@
|
|
Adjust filters and comment them to explain the basic operation.
Use large-community and a prefix-set to ensure no bad prefixes are
leaked to eBGP speakers.
With and OK job@
|
|
|
|
immediately above also uses this notation, it's shorter, and it keeps
two examples in the man page which claim to be the same as the default config
(but with exceptions) in sync;
ok gilles
|
|
ok eric@
|
|
so that the changed default will be pointed out to the admin by
sysmerge.
Idea & OK sthen
|
|
OK millert@, kn@, ian@, sthen@
|
|
cases and will just be copied by users without thinking.
ok claudio@
|
|
Rockchip ARM SoCs.
ok millert@, deraadt@
|
|
|
|
Suggested by and OK jmc.
OK tb
|
|
ok kettenis@+florian@'s OCD
|
|
OK benno
|
|
|
|
|
|
While here, qname minimisation is an RFC since some time.
tweak & OK sthen
|
|
|
|
With & OK deraadt
input sthen
looks better to beck
OK benno
|
|
session tickets instead. Adjust example relayd.conf file.
From Matt Schwartz, reminded by jmc@ OK deraadt@
|
|
|
|
|
|
displaying usage();
ok tb
|
|
From jmc@, ok tb@
|
|
|
|
|
|
|
|
|
|
OK tb
|
|
|
|
are signalled to shutdown cleanly. Wait for each to finish to avoid too much
busy work at once; this may need revising if it turns out to be too slow with
a larger number of VMs (e.g. signal/delay/signal/delay/... then wait for
shutdowns), but let's avoid making it more complex unless we know it's needed.
Based on a diff from abieber@, discussed with mlarkin@ aja@ rpe@, ok rpe
|
|
OK tb
|
|
to skip backup or temp files.
- test if the patterns matched actual files
- warn if ifcreate() fails on an interface and continue with the
subsequent interfaces in the list instead of return'ing
OK dlg sthen tb
|
|
These PATH helpers failed to quote their input properly leading to shell
code execution. Noone noticed since import (over 21 years ago), so wipe it.
OK tb rpe
|
|
|
|
- In ifcreate() use the exit code of the {} block directly
- In vifscreate(), use the ifconfig -C output directly in the for _vif loop
- Remove superfluous and somewhat confusing comment
OK dlg kn sthen
|
|
this resolves an ordering problem when adding pseudo interfaces to bridges
tweaks from kn@
ok mpi@ sthen@
|
|
by the ::0.0.0.0/96 reject route added to deny all IPv4 mapped addresses.
Makes the inet6 routing table almost fit in one screen.
OK benno@
|
|
Add soii.key to changelist (pointed out by semarie) and mtree/special
(suggest by Craig Skinner).
OK naddy, sthen, rpe, tb
|
|
hw.disknames. This can only happen due to a failure or user error.
In either case, silent failure makes it hard to discover and debug.
Now it will be easy to spot in the daily mail.
ok rob, schwarze
|
|
route(s). Simply print the command(s) to be issued instead.
tweak & ok rpe
|
|
it and many people prefer to remove it. Pointed out by m-asou at
soum.co.jp.
ok millert espie bluhm
|
|
The existing example was written over a decade ago, when carp(4) was
not supporting carpdemote and did not track it's interfaces link state itself.
OK jmc@, rob@
|
|
data. diff provided by alf <a.schlichting at lemarit.com>
ok millert
|
|
|
|
- change -a, -o to &&, || inside [[]]
- remove unecessary quoting inside [[]]
- remove X"" constructs inside [[]]
- remove \ (line continuation) in case of &&, || and pipes
- replace backticks with $()
discussed with and OK aja@
OK tb
|
|
daemon scripts.
discussed with and OK aja@
OK tb
|
|
PF ruleset. This is not a complete block on _pbuild being able to communicate
(e.g. non-TCP/UDP protocols don't have a PCB with userid, so PF can't restrict
in those cases) but avoids some cases, and in particular makes it more obvious
when a port does things like download extra distfiles or dependencies
as part of the build process. Slight tweak from a diff by espie@.
|
