Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-01-22 | to parse v4 adresses, only use inet_net_pton when we find a /, otherwise | Henning Brauer | |
use inet_pton. helps bob who likes to type 1.2 3.4 instead of 1.2.3.4 and wonders why this results in two addresses. PR3638, bob ok | |||
2004-01-21 | fix wording; from Ross L Richardson (PR 3641); | Jason McIntyre | |
while i'm here, `\\' -> `\e' and kill a nasty Pp; | |||
2004-01-19 | little wflag fallout spotted by atle kristensen | Ted Unangst | |
2004-01-18 | Create log files if they do not already exist, but do not follow | Can Erkin Acar | |
symlinks. ok markus@ | |||
2004-01-18 | print link state for RTM_IFINFO messages, flush stdout correctly | Markus Friedl | |
if message contains no address; ok mpf@, deraadt@, mcbride@ | |||
2004-01-18 | this is where dhclient will start surgery | Theo de Raadt | |
2004-01-16 | Use __packed instead of __attribute__((packed)). | Alexander Yurchenko | |
ok millert@ | |||
2004-01-16 | Added -v option. Enables logging of successful exchange completion. | Hans-Joerg Hoexer | |
ok ho@ | |||
2004-01-16 | - standard option order | Jason McIntyre | |
- sync usage() - new sentence, new line - Dv (not Va) for signals - other nits ok canacar@ | |||
2004-01-15 | Try to preserve the integrity of the log file in case of errors/unexpected | Can Erkin Acar | |
shutdowns etc. Also check logfile integrity on startup and suspend logging if an inconsistency is detected. ok dhartmei@ | |||
2004-01-15 | Synchronize with syslogd privsep: When reading a new command fails, | Can Erkin Acar | |
terminate the loop instead of exiting directly, suggested by avsm@ Also get rid of trailing comma in enum, makes lint(1) happier, from Andrey Matveev andrushock at korovino dot net | |||
2004-01-15 | document tcpmd5; with jmc, hshoexer | Markus Friedl | |
2004-01-15 | print RTM_IFANNOUNCE message; netbsd; ok itojun@, henning@ | Markus Friedl | |
2004-01-15 | support for rfc 2385 tcp md5 'signature' keys | Markus Friedl | |
(e.g. ipsecadm tcpmd5 -src ::1 -dst ::1 -key deadbeef) | |||
2004-01-14 | Fix printf format string. ok deraadt@ | Otto Moerbeek | |
2004-01-14 | eliminate the predefined special qids so that qids become simple | Kenjiro Cho | |
identifiers without embedded meanings. this also allows us to make the semantics of the qid assignment in line with the tag assignment in the next step. ok, henning@ | |||
2004-01-13 | s/wd1/wd0/; from Andrey Matveev <andrushock@korovino.net> | Alexander Yurchenko | |
2004-01-13 | Use correct type for magic number. | Otto Moerbeek | |
ok marc@ millert@ | |||
2004-01-13 | Use = for assignment, not == | Otto Moerbeek | |
ok millert@ | |||
2004-01-13 | new sentence, new line; | Jason McIntyre | |
add section number to .Xr; | |||
2004-01-13 | Document ability to display all interfaces of given type by omitting unit | Ryan Thomas McBride | |
number. | |||
2004-01-13 | Allow ifconfig to print out all interfaces of a given type. | Ryan Thomas McBride | |
ie. 'ifconfig carp' prints out all carp interfaces. ok hshoexer@ tdeval@ | |||
2004-01-13 | quiet warnings. better diff suggested by tom@ ok deraadt@ | Ted Unangst | |
2004-01-12 | - avoid variable sized static array (from millert@) | Anil Madhavapeddy | |
- check for snprintf overflow - errx -> err for strdup commit #1000! | |||
2004-01-11 | Trivial changes to pass through -Wall | Alexander Yurchenko | |
ok millert@ | |||
2004-01-11 | -DANCACHE belongs to CPPFLAGS, not CFLAGS. | Alexander Yurchenko | |
ok millert@ | |||
2004-01-11 | remove the temporary -O flag.. | Theo de Raadt | |
2004-01-11 | Print output as "var=value" instead of "var = value". Also, any assignment | Theo de Raadt | |
implies -w. I have despised the existing behaviour for years. ok from henning, millert, grange | |||
2004-01-09 | call nc correctly (nc has changed a while ago). | Hans-Joerg Hoexer | |
ok markus@ | |||
2004-01-09 | route -q is supposed to be totally quiet | Theo de Raadt | |
2004-01-09 | Tell the user to run ps if they try to view things under KERN_PROC2 | Todd C. Miller | |
(same handling as KERN_PROC). | |||
2004-01-08 | add dirhash sysctls | Ted Unangst | |
2004-01-07 | document syn cache sysctl; ok deraadt, jmc, itojun | Markus Friedl | |
2004-01-07 | Better diagnostic message if we can't open the external MBR file | Tom Cosgrove | |
ok weingart@, tedu@ | |||
2004-01-07 | Sync fdisk's internal master boot record with the recent changes | Tom Cosgrove | |
to /usr/mdec/mbr. (This code is only used if /usr/mdec/mbr cannot be found.) ok toby@, tedu@ | |||
2004-01-06 | small typos fixed. | Hans-Joerg Hoexer | |
ok markus@ | |||
2004-01-06 | Remove redundant test for file types. Noted by Stefan Paletta. | Hans-Joerg Hoexer | |
While around, fix typos in log messages. Both ok markus@ | |||
2004-01-05 | few off by ones in strlcpy overflow check; Patrick Latifi | Henning Brauer | |
2004-01-05 | 0K == -273.15C and sync computation with drivers; ok grange | Markus Friedl | |
2004-01-05 | include path fixes for gcc3. | Marc Espie | |
tests otto@, okay millert@ | |||
2004-01-04 | don't ignore "!" on "binat on !foo". ok mcbride@ | Cedric Berger | |
2004-01-03 | Be more careful with INITIAL-CONTACT and do not delete SPIs when getting | Hakan Olsson | |
an INVALID-SPI notification. Issues noted by Thomas Walpuski. markus@ ok. | |||
2004-01-02 | factor out dump.c from rtsol by -DSMALL | Jun-ichiro itojun Hagino | |
2004-01-02 | unifdef for readability. req'ed by deraadt | Jun-ichiro itojun Hagino | |
2004-01-02 | fix mount_mfs example: -N is only an option for newfs not mount_mfs | David Krause | |
also use a real device name like sd0b ok millert@ jmc@ | |||
2004-01-01 | use warnx for ENXIO devices, so that it says "Device not configured". For | Theo de Raadt | |
other errors, continue too use the "is not a bridge" mantra. | |||
2003-12-31 | spacing. note this, cedric | Theo de Raadt | |
2003-12-31 | Many improvements to the handling of interfaces in PF. | Cedric Berger | |
1) PF should do the right thing when unplugging/replugging or cloning/ destroying NICs. 2) Rules can be loaded in the kernel for not-yet-existing devices (USB, PCMCIA, Cardbus). For example, it is valid to write: "pass in on kue0" before kue USB is plugged in. 3) It is possible to write rules that apply to group of interfaces (drivers), like "pass in on ppp all" 4) There is a new ":peer" modifier that completes the ":broadcast" and ":network" modifiers. 5) There is a new ":0" modifier that will filter out interface aliases. Can also be applied to DNS names to restore original PF behaviour. 6) The dynamic interface syntax (foo) has been vastly improved, and now support multiple addresses, v4 and v6 addresses, and all userland modifiers, like "pass in from (fxp0:network)" 7) Scrub rules now support the !if syntax. 8) States can be bound to the specific interface that created them or to a group of interfaces for example: - pass all keep state (if-bound) - pass all keep state (group-bound) - pass all keep state (floating) 9) The default value when only keep state is given can be selected by using the "set state-policy" statement. 10) "pfctl -ss" will now print the interface scope of the state. This diff change the pf_state structure slighltly, so you should recompile your userland tools (pfctl, authpf, pflogd, tcpdump...) Tested on i386, sparc, sparc64 by Ryan Tested on macppc, sparc64 by Daniel ok deraadt@ mcbride@ | |||
2003-12-30 | fix TAILQ abuse. | Henning Brauer | |
TAILQ_REMOVE is a no-no within a TAILQ_FOREACH loop. also free the symbol itself after removal. all found while hacking bgpd which incorporates pfctl's sym code (macros). ok cedric@ | |||
2003-12-30 | s/inadvertantly/inadvertently; | Jason McIntyre | |