Age | Commit message (Collapse) | Author | |
---|---|---|---|
2018-08-16 | Switch nsd control socket from localhost to a unix domain socket. | Florian Obser | |
OK sthen | |||
2018-08-16 | The zoneinfo directories can be mode 755 just like everything else. | Todd C. Miller | |
OK deraadt@ | |||
2018-08-11 | don't need 61 keys anymore | Theo de Raadt | |
2018-08-10 | crank to 6.4-beta | Theo de Raadt | |
2018-08-07 | Similar to the ldpd.conf change don't use a macro of the secret. | Claudio Jeker | |
Macros get sometimes logged so we should not encurage to use them for sensitive data. | |||
2018-08-06 | Correct example file since reserved words cannot be used as macros. Not only | Ricardo Mestre | |
that, the macro used was password and if we changed it to something like pass="secret" it would log it if the daemon was ran in verbose mode. Hint and OK claudio@ | |||
2018-07-28 | sync | Alexandre Ratchov | |
2018-07-28 | Remove unused /dev/audio and /dev/audioctl symlinks. | Alexandre Ratchov | |
ok deraadt | |||
2018-07-25 | s/resolver/nameserver/ to match parse.y -r1.4 | Jasper Lievisse Adriaanse | |
2018-07-24 | add rad.conf example | Jasper Lievisse Adriaanse | |
ok florian@ | |||
2018-07-23 | add _rad user | Florian Obser | |
OK tb, claudio | |||
2018-07-23 | Remove rtadvd(8) rc script. | Florian Obser | |
2018-07-23 | Remove rtadvd(8) leftovers in etc. | Florian Obser | |
OK deraadt, phessler | |||
2018-07-23 | It's time to switch to rad(8); tested by many. | Florian Obser | |
Unhook rtadvd from build. OK deraadt, phessler | |||
2018-07-23 | It's time to switch to rad(8); tested by many. | Florian Obser | |
Remove rtadvd(8) from rc(8). OK deraadt, phessler | |||
2018-07-22 | document method=https, and use it in the example config; | Jason McIntyre | |
from lauri tirkkonen; ok sthen beck | |||
2018-07-13 | add rad.conf; from semarie; tweak & OK tb | Florian Obser | |
2018-07-12 | rc(8) infrastructure for rad | Florian Obser | |
2018-07-12 | Add _rad user and group for rad(8). | Florian Obser | |
This recycles the _btd uid/gid that have been removed in 2013. Discussed in the hackroom. | |||
2018-07-11 | Explicitly call "/etc/rc.d/vmd stop". This issues graceful shutdown commands | Stuart Henderson | |
to running VMs (at least for OpenBSD ones), but the stop routine for system daemons is not usually called at shutdown. Earlier version with just "vmd stop" ok reyk@ kn@, ajacoutot@ reminded me to hide the contextless "vmd(ok)" text which looks bad, I did so and wrapped it with a "stopping VMs" message (it can take some time, especially when you have multiple VMs, so better to have some clear feedback). | |||
2018-07-11 | Add -w option to vmctl stop to wait for completion of VM termination. | Reyk Floeter | |
Use it in /etc/rc.d/vmd accordingly. OK sthen@ | |||
2018-07-11 | Don't hide errors when IPv6 forwarding is not enabled. | Florian Obser | |
OK(failed) phessler OK deraadt | |||
2018-07-10 | we were refering to 10k states by default here as well, pt out by claudio | Henning Brauer | |
2018-07-08 | netstart is used during system start, but also interactively. | Theo Buehler | |
Show proper error message if a regular user executes netstart. Only do the privilege check if the id binary is available, which might not be the case during diskless system startup. ok deraadt, jasper, jca, krw, rpe (who wrote the same diff), sthen | |||
2018-07-03 | list the ports for gre in udp, as per rfc8086 and iana assignments. | David Gwynne | |
ok benno@ deraadt@ | |||
2018-06-27 | a mirror URLs -> a mirror URL | Theo Buehler | |
From Raf Czlonka | |||
2018-06-21 | Add 6to4 anycast prefixes to bogon filter | job | |
Globally anycasted 6to4 has outlived its usefulness. Operational discussion: http://seclists.org/nanog/2018/Jun/268 OK deraadt@ | |||
2018-06-13 | Rename httpd.conf "root strip" option to "request strip". | Reyk Floeter | |
"root strip" was semantically incorrect and did cause some confusion as it never stripped the root but the client's request path. Discussed with many. Heads up: this is a grammar change that also affects acme-client(1) configurations (see current.html). OK claudio@ | |||
2018-06-13 | Adjust example after the announce (all|self|...) change. | Claudio Jeker | |
Adjust filters and comment them to explain the basic operation. Use large-community and a prefix-set to ensure no bad prefixes are leaked to eBGP speakers. With and OK job@ | |||
2018-06-07 | prepare for dri3proto | Matthieu Herrb | |
2018-06-04 | remove "from local" (the default) from one of the match rules: the line | Jason McIntyre | |
immediately above also uses this notation, it's shorter, and it keeps two examples in the man page which claim to be the same as the default config (but with exceptions) in sync; ok gilles | |||
2018-05-24 | update default config to new grammar | Gilles Chehade | |
ok eric@ | |||
2018-05-18 | Put commented minimal-reponses and refuse-any defaults into nsd.conf | Florian Obser | |
so that the changed default will be pointed out to the admin by sysmerge. Idea & OK sthen | |||
2018-05-16 | Remove default ls -C alias. | Marco Pfatschbacher | |
OK millert@, kn@, ian@, sthen@ | |||
2018-05-06 | don't put options in here that should not be needed in the majority of | Sebastian Benoit | |
cases and will just be copied by users without thinking. ok claudio@ | |||
2018-05-02 | Add std.1500000 entry, mostly because of firmware constraints on various | Mark Kettenis | |
Rockchip ARM SoCs. ok millert@, deraadt@ | |||
2018-04-29 | stop installing /etc/networks, it is now unused; OK deraadt@ tb@ | Ingo Schwarze | |
2018-04-28 | Add a proper usage() function. | Robert Peichaer | |
Suggested by and OK jmc. OK tb | |||
2018-04-13 | spaces->tab | Antoine Jacoutot | |
ok kettenis@+florian@'s OCD | |||
2018-04-11 | "listen on * port 80" means all v4 and v6 addresses these days. | Florian Obser | |
OK benno | |||
2018-04-04 | adapt armv7 manual pages for arm64 | Jonathan Gray | |
2018-04-03 | Import regenerated moduli file. | Darren Tucker | |
2018-03-29 | Add aggressive-nsec example block. | Florian Obser | |
While here, qname minimisation is an RFC since some time. tweak & OK sthen | |||
2018-03-23 | probably the correct date | Theo de Raadt | |
2018-03-23 | Provide an example httpd.conf that's actually useful. | Florian Obser | |
With & OK deraadt input sthen looks better to beck OK benno | |||
2018-03-23 | Since a while relayd switched from the TLS session cache to using only TLS | Claudio Jeker | |
session tickets instead. Adjust example relayd.conf file. From Matt Schwartz, reminded by jmc@ OK deraadt@ | |||
2018-03-15 | add syspatch public keys for 6.3 and 6.4 | Robert Nagy | |
2018-03-14 | remove 6.0 keys | T.J. Townsend | |
2018-03-04 | when -n is used, no need to spit out "Missing parameters." before | Jason McIntyre | |
displaying usage(); ok tb | |||
2018-03-03 | Lowercase 'usage' and group -n with interface in it. | Landry Breuil | |
From jmc@, ok tb@ |