summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2004-01-22to parse v4 adresses, only use inet_net_pton when we find a /, otherwiseHenning Brauer
use inet_pton. helps bob who likes to type 1.2 3.4 instead of 1.2.3.4 and wonders why this results in two addresses. PR3638, bob ok
2004-01-21fix wording; from Ross L Richardson (PR 3641);Jason McIntyre
while i'm here, `\\' -> `\e' and kill a nasty Pp;
2004-01-19little wflag fallout spotted by atle kristensenTed Unangst
2004-01-18Create log files if they do not already exist, but do not followCan Erkin Acar
symlinks. ok markus@
2004-01-18print link state for RTM_IFINFO messages, flush stdout correctlyMarkus Friedl
if message contains no address; ok mpf@, deraadt@, mcbride@
2004-01-18this is where dhclient will start surgeryTheo de Raadt
2004-01-16Use __packed instead of __attribute__((packed)).Alexander Yurchenko
ok millert@
2004-01-16Added -v option. Enables logging of successful exchange completion.Hans-Joerg Hoexer
ok ho@
2004-01-16- standard option orderJason McIntyre
- sync usage() - new sentence, new line - Dv (not Va) for signals - other nits ok canacar@
2004-01-15Try to preserve the integrity of the log file in case of errors/unexpectedCan Erkin Acar
shutdowns etc. Also check logfile integrity on startup and suspend logging if an inconsistency is detected. ok dhartmei@
2004-01-15Synchronize with syslogd privsep: When reading a new command fails,Can Erkin Acar
terminate the loop instead of exiting directly, suggested by avsm@ Also get rid of trailing comma in enum, makes lint(1) happier, from Andrey Matveev andrushock at korovino dot net
2004-01-15document tcpmd5; with jmc, hshoexerMarkus Friedl
2004-01-15print RTM_IFANNOUNCE message; netbsd; ok itojun@, henning@Markus Friedl
2004-01-15support for rfc 2385 tcp md5 'signature' keysMarkus Friedl
(e.g. ipsecadm tcpmd5 -src ::1 -dst ::1 -key deadbeef)
2004-01-14Fix printf format string. ok deraadt@Otto Moerbeek
2004-01-14eliminate the predefined special qids so that qids become simpleKenjiro Cho
identifiers without embedded meanings. this also allows us to make the semantics of the qid assignment in line with the tag assignment in the next step. ok, henning@
2004-01-13s/wd1/wd0/; from Andrey Matveev <andrushock@korovino.net>Alexander Yurchenko
2004-01-13Use correct type for magic number.Otto Moerbeek
ok marc@ millert@
2004-01-13Use = for assignment, not ==Otto Moerbeek
ok millert@
2004-01-13new sentence, new line;Jason McIntyre
add section number to .Xr;
2004-01-13Document ability to display all interfaces of given type by omitting unitRyan Thomas McBride
number.
2004-01-13Allow ifconfig to print out all interfaces of a given type.Ryan Thomas McBride
ie. 'ifconfig carp' prints out all carp interfaces. ok hshoexer@ tdeval@
2004-01-13quiet warnings. better diff suggested by tom@ ok deraadt@Ted Unangst
2004-01-12- avoid variable sized static array (from millert@)Anil Madhavapeddy
- check for snprintf overflow - errx -> err for strdup commit #1000!
2004-01-11Trivial changes to pass through -WallAlexander Yurchenko
ok millert@
2004-01-11-DANCACHE belongs to CPPFLAGS, not CFLAGS.Alexander Yurchenko
ok millert@
2004-01-11remove the temporary -O flag..Theo de Raadt
2004-01-11Print output as "var=value" instead of "var = value". Also, any assignmentTheo de Raadt
implies -w. I have despised the existing behaviour for years. ok from henning, millert, grange
2004-01-09call nc correctly (nc has changed a while ago).Hans-Joerg Hoexer
ok markus@
2004-01-09route -q is supposed to be totally quietTheo de Raadt
2004-01-09Tell the user to run ps if they try to view things under KERN_PROC2Todd C. Miller
(same handling as KERN_PROC).
2004-01-08add dirhash sysctlsTed Unangst
2004-01-07document syn cache sysctl; ok deraadt, jmc, itojunMarkus Friedl
2004-01-07Better diagnostic message if we can't open the external MBR fileTom Cosgrove
ok weingart@, tedu@
2004-01-07Sync fdisk's internal master boot record with the recent changesTom Cosgrove
to /usr/mdec/mbr. (This code is only used if /usr/mdec/mbr cannot be found.) ok toby@, tedu@
2004-01-06small typos fixed.Hans-Joerg Hoexer
ok markus@
2004-01-06Remove redundant test for file types. Noted by Stefan Paletta.Hans-Joerg Hoexer
While around, fix typos in log messages. Both ok markus@
2004-01-05few off by ones in strlcpy overflow check; Patrick LatifiHenning Brauer
2004-01-050K == -273.15C and sync computation with drivers; ok grangeMarkus Friedl
2004-01-05include path fixes for gcc3.Marc Espie
tests otto@, okay millert@
2004-01-04don't ignore "!" on "binat on !foo". ok mcbride@Cedric Berger
2004-01-03Be more careful with INITIAL-CONTACT and do not delete SPIs when gettingHakan Olsson
an INVALID-SPI notification. Issues noted by Thomas Walpuski. markus@ ok.
2004-01-02factor out dump.c from rtsol by -DSMALLJun-ichiro itojun Hagino
2004-01-02unifdef for readability. req'ed by deraadtJun-ichiro itojun Hagino
2004-01-02fix mount_mfs example: -N is only an option for newfs not mount_mfsDavid Krause
also use a real device name like sd0b ok millert@ jmc@
2004-01-01use warnx for ENXIO devices, so that it says "Device not configured". ForTheo de Raadt
other errors, continue too use the "is not a bridge" mantra.
2003-12-31spacing. note this, cedricTheo de Raadt
2003-12-31Many improvements to the handling of interfaces in PF.Cedric Berger
1) PF should do the right thing when unplugging/replugging or cloning/ destroying NICs. 2) Rules can be loaded in the kernel for not-yet-existing devices (USB, PCMCIA, Cardbus). For example, it is valid to write: "pass in on kue0" before kue USB is plugged in. 3) It is possible to write rules that apply to group of interfaces (drivers), like "pass in on ppp all" 4) There is a new ":peer" modifier that completes the ":broadcast" and ":network" modifiers. 5) There is a new ":0" modifier that will filter out interface aliases. Can also be applied to DNS names to restore original PF behaviour. 6) The dynamic interface syntax (foo) has been vastly improved, and now support multiple addresses, v4 and v6 addresses, and all userland modifiers, like "pass in from (fxp0:network)" 7) Scrub rules now support the !if syntax. 8) States can be bound to the specific interface that created them or to a group of interfaces for example: - pass all keep state (if-bound) - pass all keep state (group-bound) - pass all keep state (floating) 9) The default value when only keep state is given can be selected by using the "set state-policy" statement. 10) "pfctl -ss" will now print the interface scope of the state. This diff change the pf_state structure slighltly, so you should recompile your userland tools (pfctl, authpf, pflogd, tcpdump...) Tested on i386, sparc, sparc64 by Ryan Tested on macppc, sparc64 by Daniel ok deraadt@ mcbride@
2003-12-30fix TAILQ abuse.Henning Brauer
TAILQ_REMOVE is a no-no within a TAILQ_FOREACH loop. also free the symbol itself after removal. all found while hacking bgpd which incorporates pfctl's sym code (macros). ok cedric@
2003-12-30s/inadvertantly/inadvertently;Jason McIntyre