Age | Commit message (Collapse) | Author | |
---|---|---|---|
2008-05-13 | Add missing files. | Mark Kettenis | |
2008-05-09 | now we also need the anchor "relayd/*" in addition to the rdr-anchor. | Reyk Floeter | |
ok pyr@ | |||
2008-05-07 | Add synchronisation support for dhcpd - this allows for two dhcpd's | Bob Beck | |
with the same configuration to be run on the same net and they will keep their lease files/state in synch, and therefore allowing you to run redundant dhcpd's. Synchronization code stolen from spamd, uses an hmac key in /var/db/dhcpd.key if it exists. ok krw@ deraadt@ | |||
2008-05-07 | routed is no longer, use ripd instead. | Claudio Jeker | |
2008-05-06 | - move some services from unofficial to the Assigned Numbers section, | Stuart Henderson | |
including some "cleverly" positioned in the dynamic range :( - add a couple of services relating to some ports/packages which otherwise need a manual change to this file looks good to ajacoutot, steven. suggestions/ok deraadt | |||
2008-04-27 | Add section n for Tcl/Tk related pages. | Deanna Phillips | |
ok jmc@, no objections espie@ | |||
2008-04-25 | express hope | Theo de Raadt | |
2008-04-17 | Teach security(8) to check for world-readable hostname.if files. | Stuart Henderson | |
An increasing number of types of these files (e.g. ppp, carp and wlan adapters) may contain secrets. ok deraadt oga johan | |||
2008-04-17 | before using them, force hostname.* files to be unreadable by world | Theo de Raadt | |
first version from todd, ok millert | |||
2008-04-15 | - make it clear that hosts.lpd follows the same syntax that hosts.equiv(5) | Antoine Jacoutot | |
inputs from jmc@ "looks ok" beck@ (similar older diff), "fine by me" jmc@ | |||
2008-04-02 | no more /usr/share/pf; pointed out by Rod Whitworth | Jason McIntyre | |
2008-03-19 | remove superfluous backslashes and semicolons | Igor Sobrado | |
ok deraadt@ | |||
2008-03-06 | Change ramdisk filesystem size from 4352 to 4000 blocks, so that | Theo de Raadt | |
bsd.rd does not overlap the boot code... this problem is starting to feel familiar.. tested by myself and claudio | |||
2008-03-06 | sector size for ramdisk should be 512 | Theo de Raadt | |
2008-03-04 | bsd.rd's physical memory usage collided with the bootblocks... The | Theo de Raadt | |
bootblocks have been moved, but we want 4.2 to be upgradeable. So reduce the footprint of the bsd.rd by shrinking the ramdisk filesystem because it is way too large. tested by sthen and kettenis | |||
2008-03-03 | log a different notification message when the tcp check times out. | Reyk Floeter | |
also adjust the documentation a little bit to decrease confusion about the check timeout. From pyr@ ok deraadt@ | |||
2008-02-29 | add configuration examples to the default pf.conf file (commented out): | Reyk Floeter | |
- rdr-anchor "relayd/*": the anchor used by relayd to load redirections into pf. - pass in on $ext_if proto icmp to ($ext_if): it is a bad habit to block icmp, this example proposes to allow it by default. ok henning@ | |||
2008-02-27 | Try to load host.random before starting the network, no network | Damien Miller | |
randomisations (among other things) benefit from it. We still try again after /var has been definitely mounted in case it is on NFS; ok deraadt@ | |||
2008-02-24 | Add entry for an iso image. -moj | Mats O Jansson | |
2008-02-20 | 4.3-beta | Miod Vallat | |
2008-02-15 | Add /var/www/conf/modules and /var/www/conf/modules.sample. | Bernd Ahlers | |
ok espie@, henning@ | |||
2008-02-09 | Add .ssh and authorized keys to /etc/skel, makes setting up new | Ryan Thomas McBride | |
pubkey authentication users with the correct file permissions a bit easier. ok djm krw henning miod and many others | |||
2008-02-04 | add IPv6 addresses for the root servers. | Jakob Schlyter | |
http://www.iana.org/reports/root-aaaa-announcement.html | |||
2008-01-31 | remove /usr/share/pf | Henning Brauer | |
2008-01-31 | enable snmpd in the build | Reyk Floeter | |
approved by deraadt@, ok thib@ | |||
2008-01-30 | make clear that the nms should run in a local network | Reyk Floeter | |
2008-01-21 | move snmpd.conf to the etc/ directory. it is not installed yet by the build. | Reyk Floeter | |
2008-01-17 | Execute rtsol after turning up trunk(4) and vlan(4) interfaces so they're | Brad Smith | |
taken into consideration for rtsol. ok reyk@ dlg@ | |||
2008-01-16 | create pflog0 whenever pf is enabled, not just when pflogd_flags!=NO | Stuart Henderson | |
fixes spamlogd with pflogd disabled. ok henning | |||
2008-01-09 | Do not bring up pfsync(4) before the working ruleset | Marco Pfatschbacher | |
has been loaded. Otherwise, states that are received during the initial bulk update mismatch the correct pf-checksum and do not attach to the rules. Problem identified by david@. Fix done in collaboration. OK henning@ | |||
2008-01-09 | Try to make /etc/ttys more consistent accross platforms, which will also | Miod Vallat | |
make the installation media's life easier: - stop using ``Pc'' as a getty terminal type, use std.9600 instead. - on platforms with multiple virtual consoles (alpha, amd64, i386, zaurus), console is disabled, various ttyC* are enabled. - on other platforms, console is enabled, all other devices are disabled. This only changes armish, mac68k, sgi. - default terminal for console is unknown on serial-only machines, vt220 on glass-capable machines (questionable, but done for consistency). - minor whitespace changes. - glass console forgotten on a couple platforms (luna88k, sparc64, vax). eyeballed by deraadt@, ok krw@ | |||
2008-01-08 | switch console to std.9600 (suncons is the same); ok miod | Theo de Raadt | |
2008-01-06 | Update fbtab with the glass console devices. | Miod Vallat | |
2008-01-05 | Add commented out entries for watchdog timers. If you enable the watchdog | Marc Balmer | |
timeout, either set auto retriggering or start watchdogd(8)... From Mitja Muzenic. ok deraadt. | |||
2008-01-04 | Use consistent capitalization in comments. From mitja@muzenic.net. | Marc Balmer | |
2008-01-03 | create directory again | Theo de Raadt | |
2008-01-03 | revert back to using local zones for localhost. and IPv4/IPv6 reverse until | Jakob Schlyter | |
we've found a better solution for chrooted applications. | |||
2008-01-01 | Updated moduli file; ok djm@ | Darren Tucker | |
2007-12-20 | typo | Jakob Schlyter | |
2007-12-20 | add OpenBSD-tag | Jakob Schlyter | |
2007-12-18 | add commented entry for machdep.kbdreset | Jasper Lievisse Adriaanse | |
ok jsing@ miod@ | |||
2007-12-16 | remove localhost. zone (localhost. queries are handled by /etc/hosts) | Jakob Schlyter | |
replace IPv4 and IPv6 loopback zones with BIND's autogenerated empty zones. move root.hint to /var/named/etc remove empty directory /var/named/standard | |||
2007-12-14 | Enable console support for SGI O2 workstations. Switch between the serial | Joel Sing | |
and graphical console based on the selection made in the ARCBIOS. Early attachment of gbe(4) is still required, otherwise we have a working graphical console. ok miod@ | |||
2007-12-13 | add explicit allow-recursion for recursive view | Jakob Schlyter | |
2007-12-11 | mention starttls(8) | Todd C. Miller | |
2007-12-09 | _hoststated got renamed to _relayd | Reyk Floeter | |
2007-12-09 | hoststated.conf got renamed to relayd.conf | Reyk Floeter | |
From Daniel Ouellet (daniel at presscom dot net) | |||
2007-12-08 | make the generic handler for TCP-based protocols the default (allows | Reyk Floeter | |
to use "protocol foo" without defining a type). | |||
2007-12-08 | some changes to the relayd.conf configuration language and grammar. | Reyk Floeter | |
the tables will look more like pf tables, it is easier to re-use tables with different options, "services" will become "redirections" (they refer to rdr pf rules), sync configuration directives of redirect (l3, ex-service) relay (l7) sections (for example "virtual host" will become "listen on"), all target definitions will start with "forward to", etc. pp. (see relay.conf(5) and etc/relayd.conf) discussed with pyr and deraadt ok pyr@ | |||
2007-12-07 | oops, _relayd not _relay; spotted by reyk | Theo de Raadt | |