summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2009-09-11This sample ruleset does not use require-order to mix NAT/rdrStuart Henderson
and filter rules, because we no longer have translation rules. Pointed out by Mitja Muzenic, ok henning@
2009-09-07example spamd rules should be "pass in";Jason McIntyre
2009-09-06add framework for palmTheo de Raadt
2009-09-05Palm: initial commit of etc/etc.palmMarek Vasut
OK deraadt@
2009-09-01add back sample spamd(8) rules, converted appropriately; ok henning@Todd T. Fries
2009-09-01todd reminded me we need to adjust this tooHenning Brauer
2009-08-18Add entry for ypldap.conf (may contain a password).Antoine Jacoutot
ok pyr@
2009-08-13syncTheo de Raadt
2009-08-13Add nodes for vscsi0; ok dlgTheo de Raadt
2009-08-12dlg wants iscsi in here; ok dlgTheo de Raadt
2009-08-12change some defaults inside amd itself, so that the rc scripts no longerTheo de Raadt
have to pass those options. this makes amd much easier to restart by hand (though it still remains a nasty daemon do that with) ok millert
2009-08-10gpio for amd64.Jonathan Gray
ok deraadt@
2009-08-10advise to update /etc/rc.conf.local instead of /etc/rc.conf; from RemcoOkan Demirmen
ok todd@
2009-08-08typo in comment; frantisekTheo de Raadt
2009-08-07- specifically match carp+([0-9]):, not just carp*:. avoids spuriousStuart Henderson
attempts to "ifconfig carp down" noticed by david@. - use non-descriptive variables names rather than $if/$junk to encourage people reading the code to think what it's doing; many of the output lines are not interface names. ok david@
2009-08-07fix ksh ftp wrapper so argvs aren't split before passing; makingMartynas Venckus
urls with spaces work. ok sthen@
2009-08-05correct indentTheo de Raadt
2009-08-04zap the rather useless machdep.apmwarn entries (see apm(4));Jason McIntyre
ok deraadt
2009-08-04Don't use grep/cut during shutdown, /usr might not be mounted.Stuart Henderson
Spotted by deraadt@. These were used to bring down carp ifaces cleanly; replace with shell features. ok deraadt@, henning@. "Much mo' better" blambert@.
2009-07-28Add bsd.mp to MDEXTMiod Vallat
2009-07-22syncAlexandre Ratchov
2009-07-22add missing /dev/{rmidi,sequencer,music} bits in MAKEDEV forAlexandre Ratchov
armish, landisk and zaurus. Also fix corresponding .Xr in MAKEDEV.8 ok miod@, todd@
2009-07-10Delay creation of tun(4) interfaces until the underlying interface andJason Dixon
routes are available. This fixes usage for some OpenVPN users that start it from hostname.tun*. Tested by Johan Huldtgren. ok sthen@, johan@.
2009-06-30extra spaces found during inspection of other gooTheo de Raadt
2009-06-30Make syslogd create a socket in /var/www/dev when httpd is enabled in orderRobert Nagy
to make logging to syslog work with php for example. ok deraadt@, henning@
2009-06-26the correct *.ipk file has ${OSrev} in itTheo de Raadt
2009-06-24Fix a typogiovanni
"sure" sthen@
2009-06-204.6-BETAMiod Vallat
2009-06-10pf should block the port range allocated by net.inet.tcp.baddynamicIgor Sobrado
for the X protocol instead of port 6000 only; this way pf provides the same protection level to all X servers. ok sthen@; "I am convinced that 6000-6010 is acceptable for blocking in pf" deraadt@, "i'd thought of something similar" oga@
2009-06-09By default, don't accept IPv4 ICMP redirects. This behaviour can beStuart Henderson
changed with a sysctl, so note it in sysctl.conf. v6 needs further testing following discussions on the tech mailing list; rainer@ points out possible interactions with neighbour discovery which need to be investigated first. "go ahead on the v4 part" deraadt@
2009-06-03- regenJasper Lievisse Adriaanse
2009-06-03- add hotplug deviceJasper Lievisse Adriaanse
ok miod@
2009-06-03gak, I loose, backout unintended hitchiker on my last commitTodd T. Fries
2009-06-03syncTodd T. Fries
2009-06-03SyncJanne Johansson
2009-06-03Arla client rename from xfs to nnpfs for later upgrades. Tested on various ↵Janne Johansson
arches. ok todd@ beck@
2009-05-31Make sure xdm is installed before trying to run itAlexander Hall
ok deraadt@
2009-05-31enable pf by default.Henning Brauer
turns bombs into flowers, water into beer and eradicts swine flu
2009-05-31224MB is no longer enough for the full sgi iso, crank to 240MB.Miod Vallat
2009-05-30shorter, ok theoHenning Brauer
2009-05-30we want pass, not pass in, so we get state for all connectionsHenning Brauer
2009-05-30Build IP27 and IP30 kernels on sgi; put then on the cdrom images tooMiod Vallat
(although for now our cd images fail to boot on IP27 and IP30).
2009-05-26Three rdist log file name improvements on one single line:Ingo Schwarze
1) replace +%e by +%d, unescaped blanks don't work at all in file names 2) replace +%b by +%m to make log files sort better by month 3) replace the home-grown +%Y.%m.%d by the standard +%F (= +%Y-%m-%d) from Tim van der Molen <tbvdm at xs4all dot nl>, thanks! ok okan@
2009-05-25polish comments, no functional change:Ingo Schwarze
1) advertise *.local and next_part near the top of the three scripts 2) daily: mention smtpd(8) mailq behaviour (like for sendmail, postfix, exim) 3) weekly: drop a comment trivially rehashing the next two lines of code documenting next_part in the scripts was suggested by jmc@ ok sthen@ okan@ halex@; "i won't object" ajacoutot@
2009-05-24new variable SUIDSKIP to exclude paths from setuid and device checks,Ingo Schwarze
useful for example for release(8) DESTDIRs, ro-mounted foreign OS partitions, nosuid+nodev-mounted backup areas and the like while here, do not call ls w/o args in case find returns nothing based on a patch from halex@, re-implemented by me; variable naming by jmc@ ok halex@ jmc@
2009-05-24Before dd'ing raw partitions around, do stricter sanity checking:Ingo Schwarze
Do not attempt to copy a larger partition onto a smaller one. Backup of non-ffs root partitions was never supported, so don't even try. (Both of the above suggested by guenther@). Also add error messages in case ROOTBACKUP is switched on but severely misconfigured - those were silently ignored in the past: /altroot not defined or wrong type or on the same device as root. otto@ agrees that checking the sizes makes sense
2009-05-24Install root's crontab with gid "crontab" to be consistent with whatAntoine Jacoutot
crontab(1) does. ok miod@
2009-05-23Update `cdroot' disktab entry to match the volume header size we use now,Miod Vallat
and mention this in the Makefile so that this hopefully doesn't get broken next time the size is modified. Repairs install45.iso.
2009-05-21skip the ROOTBACKUP when the destination disk device is not configured;Ingo Schwarze
suggested, tweaked and ok by guenther@
2009-05-20add a group _rwalld tooThordur I. Bjornsson