summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2006-12-06typo; from Daniel Matic <maticd at gmail.com>joshua stein
2006-12-05plug memleak, noticed by jesus@mxtelecom.comHans-Joerg Hoexer
ok moritz@, tested by jesus@mxtelecom.com (thanks!)
2006-12-05some carp/sasyncd bits from msf and myself;Jason McIntyre
ok mpf
2006-12-05Don't leak message structures, when we see unsupported payloadsMoritz Jodeit
or if the payload node allocation fails. Also adjust a comment to make it more clear, who's responsible for freeing the message structs. Input from cloder@. OK hshoexer@
2006-12-04retreive -> retrieve;Jason McIntyre
2006-12-03Add Rapid Spanning Tree Protocol support (802.1d-2004) based on workReyk Floeter
by Andrew Thompson (thompsa@freebsd.org). The local changes include adoption to our bridge code, reduced stack usage and many other bits. If stp is enabled, RSTP will now be used by default. Thanks for help from Andrew. This code has been in snaps for while now, commit encouraged by deraadt@
2006-11-30typo: wrong rid for protocolMarkus Friedl
2006-11-30use rmv to unregister ipsec connections; ok hshoexer, hoMarkus Friedl
2006-11-30handle multiple SAs with different same src/dst but different port;Markus Friedl
store IKE connection string and phase2 IDs in the ipsec rule; cleanup internal API: pass rules around instead of rule members; report Brian Candler; fix with hshoexer, msf; ok hshoexer
2006-11-30new ui command 'rmv': removes an entry from a list, thus reversing anMarkus Friedl
'add' operation; ok ho, hshoexer, jmc eVS: ----------------------------------------------------------------------
2006-11-29no need to document generation of local.key 3 times;Jason McIntyre
spotted by mcbride, ok hshoexer;
2006-11-29zap trailing spaces;Jason McIntyre
2006-11-29tweak; ok henningJason McIntyre
2006-11-29Forgot this in my last committ: Remove not-needed header files.Marc Balmer
Also from Kevin Steves.
2006-11-29Remove an unused variable.Marc Balmer
From Kevin Steves.
2006-11-29Document the new location of local.pub, and clarify the fact that local.keyRyan Thomas McBride
contains the entire keypair. ok deraadt jmc
2006-11-29Document the new timestamping behaviour here, too, and note that enablingMarc Balmer
PPS is a device specific operation that might need special software (e.g. from our ports tree). gpsd is such an application and it has just been enabled to nicely play with the new timestamping.
2006-11-28add -T to synopsis;Jason McIntyre
2006-11-28add additional link states to report the half duplex / full duplexReyk Floeter
state, if known by the driver. this is required to check the full duplex state without depending on the ifmedia ioctl which can't be called in the kernel without process context. ok henning@, brad@
2006-11-28-T in synopsis and briefly in manpageHenning Brauer
2006-11-28do not re-add existing entries; ok hshoexerMarkus Friedl
2006-11-28fix servicecurve check; no point in checking the same sc three times, itHenning Brauer
was obviously intended to check all three. has been wrong since the beginning, 4 years... noticed by Earl Lapus <earl.lapus@gmail.com>, Vasil Dimov <vd@FreeBSD.org> mailed me then, ok mcbride
2006-11-27correct commentKevin Steves
2006-11-27Recognize when we are sending to a unicast destination IP address andKevin Steves
instead of using BPF, which currently will always set the destination MAC to broadcast, send using a SOCK_RAW socket and sendmsg() so the frame has a unicast destination MAC. Fixes an issue when using a bootp forwarder where unicast DHCPREQUESTs are dropped at the router/gateway until we reach T2/REBINDING and change the destination IP to broadcast. ok henning@ (but doesn't like using a raw socket for this)
2006-11-27remove invalid commentKevin Steves
2006-11-26repair missing DPADD requestsTheo de Raadt
2006-11-24add support to tag ipsec traffic belonging to specific IKE-initiatedReyk Floeter
phase 2 traffic. this allows policy-based filtering of encrypted and unencrypted ipsec traffic with pf(4). see ipsec.conf(5) and isakmpd.conf(5) for details and examples. this is work in progress and still needs some testing and feedback, but it is safe to put it in now. ok hshoexer@
2006-11-24fix typo for remote port; from Brian CandlerMarkus Friedl
2006-11-22sync dhclient and dhcpd parse.c areas where we can.Kevin Steves
mainly formatting, whitespace; ok henning@
2006-11-22fix some warning messages and comments in parse_date(); ok henning@Kevin Steves
2006-11-21remove spurious ; after bracket, no binary changeKevin Steves
2006-11-21remove unused #defines, no binary change; ok henning@Kevin Steves
2006-11-21do not delete sections that might be shared with other connectionsMarkus Friedl
however, this workaround might leak config entries in isakmpd; ok (for now) hshoexer
2006-11-21introduce sysctl net.inet6.ip6.multicast_mtudisc (for multicast routers).Jun-ichiro itojun Hagino
deraadt ok. manpage nit by jmc.
2006-11-21re-order includes and eliminate duplicates, no binary change; ok henning@Kevin Steves
2006-11-20-K argument to kill source tracking nodes explicitly, behaves like theRyan Thomas McBride
-k argument for killing states; From Berk D. Demir <bdd@mindcast.org> ok dhartmei henning
2006-11-20knf: sizeof x -> sizeof(x)Jun-ichiro itojun Hagino
2006-11-19Default snaplen has been 116 for a while now.Joel Knight
2006-11-19Try DIOCGPDINFO before DIOCGDINFO when trying to determine the 'label'Kenneth R Westerback
geometry for a unit. DIOCGPDINFO avoids using the on-disk label or the cached copy of it and returns a 'spoofed' label that retains the geometry info placed in the label by the driver. Unfortunately DIOCGPDINFO is not universally implemented, though sd and wd do. This is what disklabel(8) does when it wants geometry so this makes fdisk a bit more consistant with disklabel. This fixes 'fdisk -i' and 'reinit' when trying to install from a miniroot on, e.g., landisk. i.e. no need to zero out the disklabel before doing 'fdisk -i'. 'get it in snaps' deraadt@
2006-11-17change semantics of ff01::/16 to interface local multicastJun-ichiro itojun Hagino
(to sync up with more recent IPv6 spec) ok from: deraadt mcbride
2006-11-16only look at routing table 0 (main one)Henning Brauer
2006-11-16make RFC2292/3542 selection automagically happen.Jun-ichiro itojun Hagino
2006-11-15remove KAME_SCOPEID #ifdef.Jun-ichiro itojun Hagino
__KAME__ should suffice (__KAME__ should be nuked too?)
2006-11-14memory requirements are relevant only for mount_mfs; ok jmc@Otto Moerbeek
2006-11-13briefly describe phases 1 and 2, and use these terms moreJason McIntyre
consistently in the rest of the page; help/ok hshoexer
2006-11-13previous was not quite right;Jason McIntyre
2006-11-13fix a macro mistake;Jason McIntyre
2006-11-13Handle rules with addresses from mismatched address families correctly.Ryan Thomas McBride
ok msf@
2006-11-11Fix memory leak, from Charles Longeau, many okaysPedro Martelletto
2006-11-11EXAMPLES was getting too lengthy, so trim some of the ones that wereJason McIntyre
either obscure, bordering on the duplicate, or referring to pseudo devices; if you want examples for pseudo devices, put them in their specific man page, please. ok jcs