Age | Commit message (Collapse) | Author | |
---|---|---|---|
2010-01-14 | drop connections to confused clients who do repeated command failures - | Bob Beck | |
typically when a client just flings commands at us without looking for responses and then gets confused. ok jsing@ | |||
2010-01-13 | pfr.rule.*.addr.type must be initialized to PF_ADDR_NONE for things that | Claudio Jeker | |
are not used. bzero() of the rule structure is not enough. Found with dlg@, OK mcbride@ | |||
2010-01-12 | First pass at removing the 'pf_pool' mechanism for translation and routing | Ryan Thomas McBride | |
actions. Allow interfaces to be specified in special table entries for the routing actions. Lists of addresses can now only be done using tables, which pfctl will generate automatically from the existing syntax. Functionally, this deprecates the use of multiple tables or dynamic interfaces in a single nat or rdr rule. ok henning dlg claudio | |||
2010-01-11 | KNF | Bob Beck | |
2010-01-11 | KNF | Bob Beck | |
2010-01-03 | Make lazy binding work on hppa. | Mark Kettenis | |
ok miod@ | |||
2010-01-02 | Fix handling of hppa RELOC_IPLT relocations during 'bootstrap relocation'. | Mark Kettenis | |
ok miod@, deraadt@, jsing@ | |||
2010-01-02 | the abstraction of using a function pointer for the print functions is | Theo de Raadt | |
not needed (and secondly, ran into hppa not relocating function pointers correctly) ok kettenis drahn | |||
2009-12-30 | Remove paths from the prebind code that shouldn't be present. | Dale Rahn | |
2009-12-24 | deal with the new .Aq in perl manpages production. | Marc Espie | |
- handle .ie, .el minimally - define \(aq as the ' symbol. | |||
2009-11-22 | Move from the PF_RULESET_FILTER world order to PF_TRANS_RULESET | Theo de Raadt | |
due to the standard henning+oga commit-and-run-for-beer problem. ok claudio | |||
2009-11-12 | malloc() after line length check, to avoid memory leak; ok tedu | Theo de Raadt | |
2009-11-01 | remove unused variable | Charles Longeau | |
ok sthen@ | |||
2009-10-28 | rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and | Theo de Raadt | |
unmaintainable). these days, people use source. these id's do not provide any benefit, and do hurt the small install media (the 33,000 line diff is essentially mechanical) ok with the idea millert, ok dms | |||
2009-10-22 | replace cross references to other manual pages with the right macros. | Igor Sobrado | |
2009-10-11 | Support manpages with NAME written in Spanish/Italian/Portuguese | Stuart Henderson | |
ok espie@ | |||
2009-09-17 | merge/update the spamlogd rules into spamd - there were some subtle | Jason McIntyre | |
problems because of the recent pf nat changes that caused problems; i've fleshed out the example in spamd and just added a pointer to it from spamlogd; ok beck | |||
2009-09-09 | Change the way memory is allocated to reduce memory footprint. Loading the | Claudio Jeker | |
large uatraps uses now around 8 times less memory. Other cleanup includes a fast implementation of imask() (stolen from bgpd), killing some unused code and try to estimate the memory needed in add_blacklist() to reduce the realloc() calls. Tested by many (sthen, matthieu, Stephan A. Rickauer) OK beck@, sthen@ | |||
2009-09-07 | the example pf rules should be "pass in", not just "pass"; ok henning | Jason McIntyre | |
2009-09-01 | match samples here with pf.conf(5) sample ruleset following recent pf changes | Todd T. Fries | |
ok henning@ | |||
2009-09-01 | Adjust example pf rules to take nat-to/rdr-to into account. | Stuart Henderson | |
2009-09-01 | adapt to new pf, ok henning@ | Stuart Henderson | |
2009-08-19 | In ldconfig the dewey field of shlib_list was only partially filled | Alexander Bluhm | |
as bcopy used the number of elements instead of the array's size. As a consequence, the wrong version of a library could be selected if the library had many minor numbers. from Christian Rusch; ok otto@ | |||
2009-08-16 | Do not have multiple va_end(). Ok miod@ + many more. | Anders Magnusson | |
2009-07-30 | Remove unused add_nat() function, ok jcs@ | Stuart Henderson | |
2009-07-02 | add a missing full stop; noticed by frantisek holop <minusf at obiit dot org> | Ingo Schwarze | |
while here, add a missing comma and a missing word, too; ok jmc@ | |||
2009-06-04 | ...and now try again with a commit from the right tree. doh! | Stuart Henderson | |
ftp uses its own ugly "sockunion" to hold addresses, but with CMD_BIND the monitor treats it as if it were a sockaddr. this is fine for v4 but fails for v6, so active connections break. problem reported and diff tested by Maurice Janssen. looks sensible to deraadt@. | |||
2009-06-04 | ftp uses its own ugly "sockunion" to hold addresses, but with CMD_BIND | Stuart Henderson | |
the monitor treats it as if it were a sockaddr. this is fine for v4 but fails for v6, so active connections break. problem reported and diff tested by Maurice Janssen. looks sensible to deraadt@. | |||
2009-06-02 | Protect errno. | Ray Lai | |
OK millert | |||
2009-06-02 | comment spelling fix: ARSGUSED -> ARGSUSED | jmeltzer | |
2009-05-30 | Airplane work, undefined weak variables not getting resolved is not an error. | Dale Rahn | |
Delete an unused manpage, remove some unused variables. | |||
2009-05-20 | Do not fall back to using nobody if _user is missing, but | Thordur I. Bjornsson | |
error out. Add a new user _rwalld for rpc.rwalld, and use that instead of nobody, also unconditionally drop to _rwalld not only if rpc.rwalld was started with euid 0 (as root). ok deraadt@ | |||
2009-05-18 | Add buffer mechanism internal ld.so printing code. makes ktrace more readable. | Dale Rahn | |
nudge nudge deraadt@ | |||
2009-05-18 | make _dl_wrstderr() not call write per-character; ok drahn | Theo de Raadt | |
2009-04-20 | tweak previous; | Jason McIntyre | |
2009-04-20 | When receiving a new connection, log the remote IP number | Ingo Schwarze | |
in addition to the remote hostname. Feature requested by Mark Bucciarelli mkbucc at gmail dot com on misc@. "seems OK" millert@ | |||
2009-04-20 | PR 6090 - from Olli Hauer <ohauer@gmx.de> | Bob Beck | |
A number of small improvements: - patch for empty lines and comments in alloweddomains_file - remove some whitespaces at end of line. - document comment and empty line handling - Remove unused parameter 'r' from getopt in spamd.c, it is removed in the 'switch statement' but not in getopt. http://www.openbsd.org/cgi-bin/cvsweb/src/libexec/spamd/spamd.c.diff?r1=1.94;r2=1.95;f=h - replace atoi with strtonum - make debug output more usefull, display only what will be synced and not a second message which prints always "sync trapped %s" - some cosemtic and whitespace fixes. | |||
2009-03-02 | ldd(1) accepts more than one program as argument; while here, | Igor Sobrado | |
synchronize synopsis and usage. | |||
2009-02-25 | fix slow memory leak, spotted by Max Laier and Artis Caune | Bob Beck | |
ok deraadt@, oga@, otto@ | |||
2009-02-19 | correct description of spamdb-setup blacklist only mode; | Jason McIntyre | |
fixes documentation/6083; original diff and pr from Kami Petersen ok sthen | |||
2009-02-17 | clarification for the MX stuff; requested by Stephan A. Rickauer | Jason McIntyre | |
ok beck | |||
2009-02-16 | Fix passing of ps_strings, cleanup and obj_main values to _start() in crt0. | Kurt Miller | |
looks correct kettenis@ | |||
2009-02-04 | Tag ld.so as an OpenBSD binary/library. | Mark Kettenis | |
ok kurt@, drahn@, miod@ | |||
2009-01-19 | replace standardized text concerning the exit values of applications | Igor Sobrado | |
with the right mdoc macros. | |||
2009-01-14 | context could be used after being freed by krb5_free_context; ok millert@ | Jacek Masiulaniec | |
2008-12-07 | time_t is signed, so use INT_MAX rather than UINT_MAX when parsing a time_t | Chad Loder | |
with strtonum | |||
2008-11-14 | LOG_INFO is a level not a facility; input and ok jmc@ | Kevin Steves | |
2008-11-09 | typo fixed (overriden -> overridden) | Tobias Stoeckmann | |
ok espie, jmc | |||
2008-10-22 | Mention that "secure" on the console entry means, that | Marco Pfatschbacher | |
no password will be needed for single-user. It's already noted in init(8), but having it here to cannot hurt. s/login/log in/ + corrections from jmc. OK jmc@ | |||
2008-10-22 | man page for Makefile.yp, and associated bits; from Ingo Schwarze | Jason McIntyre | |
ok deraadt |