summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2018-02-24return early on some unhandled ioctls rather than err().David Gwynne
2018-02-23'partions' -> 'partitions', nuke some erroneous whitespace.Kenneth R Westerback
ok otto@
2018-02-23Add unsetrdomain() and option -rdomain to return an interface to routingakoshibe
domain 0. OK phessler, henning, deraadt, stsp, benno
2018-02-20make sure we've read the lenght bytes before checking the lengthOtto Moerbeek
ok benno@
2018-02-20Move getvnetflowid() out of #ifndef SMALL to unbreak 'make release'.Theo Buehler
Diff from jsg, ok millert, benno
2018-02-20tweak previous, with some help from dlg;Jason McIntyre
2018-02-20add support for toggling partitioning a vnetid into a netid and flowidDavid Gwynne
"vnetflowid" enables it on an interface, and "-vnetflowid" disables it. a vnetid will be suffixed with + on the encap line if it an interface reports that it is enabled.
2018-02-19(static) byte buffers are not aligned in any way, malloc the buffer toOtto Moerbeek
solve that. Prevents bus error on armv7. ok naddy@ florian@
2018-02-19tweak previous;Jason McIntyre
2018-02-19add support for setting and displaying whether a tunnel allows fragmentationDavid Gwynne
ifconfig will output "nodf" or "df" on tunnel interfaces that support the ioctl., and accepts "tunneldf" and "-tunneldf" as options to try and configure it.
2018-02-16simplify synopsis and text;Jason McIntyre
ok millert
2018-02-15update tunnelttl to talk about the "copy" argumentDavid Gwynne
2018-02-11Ooops. After getting a NAK in response to a renewal REQUEST, we deleteKenneth R Westerback
the interface's address and thus the cached configuration data becomes invalid and must be discarded. Issue found & fix tested by Christer Solskogen. Thanks!
2018-02-11Make "invalid host name" messages log_debug() since the invalid hostKenneth R Westerback
name does not cause the lease to be rejected. It just causes the containing option or field to be ignored.
2018-02-10Fix 'ignore ;' so that it really does reset the ignore list.Kenneth R Westerback
Mkae 'ignore', 'request' and 'require' cumulative so all options don't have to be jammed into one line.
2018-02-10RFC 7217 support for slaacdFlorian Obser
OK naddy, sthen
2018-02-10ifconfig can be used to to set interface flag to not do RFC 7217.Florian Obser
OK naddy, sthen man page bits input & OK jmc
2018-02-10add support for binary sysctl payloads by handling them as hexFlorian Obser
strings. this was part of a demo showing how to implement the kernel side of sysctl(3) for setting Semantically Opaque Interface Identifier key material (for RFC 7217), but it seems to be the most straightforward path toward integrating soiikey handling and rc. Originally written by dlg, who commited it some time ago on my request. I then backed it out again, now it's time to put it back in. ok florian@ sthen@ naddy@ tb@ Man page bits tweaked & OK jmc
2018-02-09If there is no link after link_timeout seconds don't forgetKenneth R Westerback
to go_daemon() while waiting for the RTM_IFINFO message. Problem spotted by Holger Mikolon.
2018-02-09Improve documentation of protected domains.Martin Pieuchot
Required by and ok otto@, ok jmc@
2018-02-08when using tunnelttl, let -1 mean "copy the ttl from the inner traffic".David Gwynne
tunnelttl now accepts "copy" as an argument, and prints "copy" when it sees -1. ok claudio@
2018-02-08tweak previous;Jason McIntyre
2018-02-08Add a new '-protected' option for bridge members.Martin Pieuchot
Bridge members that are part of the same protected domain, refered by a number between 1 and 31, cannot talk to each others. This is useful to isolate VMs or untrusted networks at layer 2. Members can be part of multiple protected domain making it possible to create complex protected setups. ok ccardenas@, claudio@, dlg@, henning@
2018-02-08make the watermarks/thresholds for entering and leaving syncookie mode whenHenning Brauer
syncookies are set to adaptive tunable, ok claudio benno
2018-02-08Don't update first_sending in state_selecting() and thusKenneth R Westerback
fix the accounting for the interval since we started the process of getting a lease. Fixes the 'no lease ... got lease' messaging at a minimum.
2018-02-08show current synflood detection watermarks in pfctl -vsi, for the lackHenning Brauer
of a more appropriate place. ok claudio benno procter
2018-02-07Keep track of the last proposal used to configure the interface andKenneth R Westerback
compare that to the offered proposal to determine if there are any changes to configure. Simpler, and fixes issue where using a recorded lease meant the interface was continually being configured with the same information.
2018-02-06allow control over syncookies: set syncookies never/always/adaptiveHenning Brauer
2018-02-06Abstract "no link ..." and "no lease ..." message generationKenneth R Westerback
into a function tick_msg(). Now both work the same way, dot dot dotting as time passes until they 'sleep'. Tested by tb@ as part of a larger diff.
2018-02-06Nuke unused state S_REBINDING. We just use the timeKenneth R Westerback
to decide between unicast and broadcast for REQUEST.
2018-02-06When binding a lease from the dhclient.leasees.<if> file andKenneth R Westerback
the renewal time is in the past wait retry_interval before trying to renew the lease.
2018-02-06Fix fprintf() to include "\n" where needed. Prefix "no lease"Kenneth R Westerback
messages with interface name. Spotted by & ok tb@
2018-02-06Flip -q (be quiet) into -v (be noisy), making terseness the defaultKenneth R Westerback
behaviour. Always go daemon after link_timeout seconds and complete lease negotiations in the background if necessary. No hanging around in the foreground for the full 64 seconds waiting for a server to appear. Log a more relevant message when a default route can't be obtained via RTM_GET. i.e. "no default route" rather than "No such process". -q -> -v ok mpi@
2018-02-05Ensure that the "bound to ..." message appears in the log unlessKenneth R Westerback
dhclient was started with '-d'. Move the "yielding responsibility" message to log_debug(). Stop logging duplicate "bound to ..." messages now that one is guaranteed to be present when the address is first bound. Thins out logs. Especially if you run with '-q'.
2018-02-05tweak previous;Jason McIntyre
2018-02-05Always run through state_preboot() when starting up or theKenneth R Westerback
link status changes. Simplifies some logic.
2018-02-05Nuke unused parameter to go_daemon().Kenneth R Westerback
2018-02-05implement an arp filterHenning Brauer
allows arp (and rarp) requests and replies to be matched, including matching based on the source and target host and protocol adresses, and thus control over arp traffic and learning. written for medical x-ray machines, but useful in many spread out L2 networks ok claudio benno
2018-02-04fprintf(stderr -> warnxcheloha
ok jca@ tb@
2018-02-02Make 'ifconfig if0 wpaakms 802.1x' implicitly enable WPA.Stefan Sperling
Requring WPA to be enabled separately via 'ifconfig if0 wpa' was confusing. ok mlarkin phessler mpi
2018-01-31Check GETTY_SPACING against the monotonic clock.cheloha
Ensures that we can use the check if the system clock is set backwards. While here, move time retrieval into the child process in start_getty(), and only get the time if se_started has been set. ok millert@ tb@
2018-01-31Add support for specifying multiple transforms within a single proposal.Patrick Wildt
This gives us more flexibilty for negotiating with other IKEv2 setups. Tested by and ok sthen@
2018-01-30Expand "bound to ..." message to include the source of the lease,Kenneth R Westerback
either the server IP/MAC or the name of the leases file. Prompted by phessler@ and landry@ feedback to another diff. ok phessler@
2018-01-29Repair botched retry loop when generating RTM_PROPOSALKenneth R Westerback
messages at startup. Reproducible situation found on vnet(4) and fix tested by jca@.
2018-01-29Missed a couple of log_info()'s in previous commit. Use #ifdef DEBUGKenneth R Westerback
instead of #if DEBUG.
2018-01-29Use log_init(), log_setverbose() and log_debug() moreKenneth R Westerback
appropriately. Fixes '-q' logging oddities. Prompted by phessler@ plea for '-v'-like behaviour rather than putting everything under DPRINTF()'s.
2018-01-28Refactor and simplify the logic to select and invoke theKenneth R Westerback
appropriate function to process a packet.
2018-01-28A few fatal() -> fatalx() where errno is notKenneth R Westerback
relevant.
2018-01-25Add DPRINTF() and use it to replace log_debug() statements insideKenneth R Westerback
#ifdef DEBUG/#endif blocks. Suggestions on correct idiom (C99 vs gcc) from millert@ ok tom@
2018-01-24Don't display the seconds until renewal. i.e. "em0: bound to 1.2.3.4Kenneth R Westerback
-- renewal in 300000 seconds" becomes simply "em0: bound to 1.2.3.4" While here avoid setting timeouts before the current time. ok florian@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-30 22:20:50 +0000