summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2006-05-28Add support for NFS mounts to be from non-reserved ports:Anil Madhavapeddy
- new sysctl vfs.nfs.privport to require NFS mount requests to be on reserved ports when set to 1 (the default). - mountd now automatically sets the sysctl depending on the -n flag. - add mountd_flags to rc.conf to enable the -n flag at boot. deraadt@ ok
2006-05-28use <machine/endian.h> to figure what we are running on instead of definingMartin Reindl
our own macros
2006-05-28when parsing host specifications, initialize host address queue pointers, notHans-Joerg Hoexer
used yet.
2006-05-28prepare for rule expansion. Get rid of addr_node, link structHans-Joerg Hoexer
ipsec_addr_wrap directly.
2006-05-28kill trainling whitespaceHans-Joerg Hoexer
2006-05-28whoops, undo last commit. Of course, set_ipmask() is needed...Hans-Joerg Hoexer
2006-05-28this one not needed yet.Hans-Joerg Hoexer
2006-05-28fill in AF_INET6 casesTodd T. Fries
this does not complete v6 support for ipsecctl, but makes progress ok hshoexer@
2006-05-28Assign a finalization event to the exchange initiated on soft expiry.Ryan Thomas McBride
If the exchange fails, the existing phase 1 SA is invalidated and the exchange is retried at the Exchange-Max-Time interval until the SA hard timeout expires. Another sasyncd-related fix from nathanael at polymorpheous dot com ok ho@ hshoexer@
2006-05-28also report SA flags.Hans-Joerg Hoexer
2006-05-28revert a part of last commit causes newlineThordur I. Bjornsson
proplems during boot. pointed out by sturm@
2006-05-28matching brackets are usefulTodd T. Fries
ok dlg@
2006-05-28apropriate -> appropriateJason McIntyre
2006-05-28missing `Ar';Jason McIntyre
2006-05-28Make per-rule adaptive timeouts behave the same way as the global adaptiveRyan Thomas McBride
timeouts.
2006-05-28Enable adaptive timeouts by default, with adaptive.start of 60% of theRyan Thomas McBride
state limit and adaptive.end of 120% of the state limit. Explicitly setting the adaptive timeouts will override the default, and it can be disabled by setting both adaptive.start and adaptive.end to 0. ok henning@
2006-05-28Change the default replay window for SAs created by the isakmpd responderRyan Thomas McBride
to be DEFAULT_REPLAY_WINDOW instead of zero. The default replay window is then the same for both initiator and receiver. Fix from nathanael at polymorpheous dot com. ok hshoexer@
2006-05-28add ERANGE error detection, found when looking at bgpd's parse.yTodd T. Fries
ok hshoexer@
2006-05-27Document net.inet6.ip6.mforwardingClaudio Jeker
2006-05-27newline fix + s/perror/xperror since we areThordur I. Bjornsson
using a home rolled version. ok pedro@
2006-05-27Kill some lint warnings by changing some variables to moreMoritz Jodeit
appropriate types and change some strtoul() to use strtonum(). ok deraadt@
2006-05-27document modp3072.Hans-Joerg Hoexer
2006-05-27replace ipsecadm with ipsecctl. ok and requested by deraadt@Hans-Joerg Hoexer
2006-05-27Kill unused Aflag support that sneeked in via netstat code.Claudio Jeker
2006-05-27Do not print an error in case of ENOPROTOOPT. Install medias do not haveClaudio Jeker
IPSec support and so will print a "route: spd-sysctl-estimate: Protocol not available" on upgrades. Requested and ok deraadt@
2006-05-27Adresses can be specified in CIDR notation, as symbolic host names, interfaceHans-Joerg Hoexer
names or interface group names. So it's time to document this...
2006-05-27allow to specify groups to be used IKEHans-Joerg Hoexer
2006-05-27add group15/modp3072 to default configurations.Hans-Joerg Hoexer
2006-05-26ipsectl -> ipsecctlJason McIntyre
2006-05-26vpn.8 removal;Jason McIntyre
2006-05-26let us not talk about ipsecadm and vpn anymore; ok reykTheo de Raadt
2006-05-26\<char> is <char> except for \<newline> -- no exceptions. much like howTheo de Raadt
other things work. ok henning
2006-05-26Assign locator.target to blink structure.Marco Peereboom
2006-05-25handle Online/Scrub SD state for marcoTheo de Raadt
2006-05-25more room for seconds stringTheo de Raadt
2006-05-25print seconds of progress, if driver makes it available; ok marcoTheo de Raadt
2006-05-25handle new volume status, and print % if known; ok marcoTheo de Raadt
2006-05-23member interfaces of groups might have no IPs and ifa_lookup retun NULL,Henning Brauer
account for that. fixes PR5130, ok dhartmei
2006-05-23remove reference to spppcontrol, which rests in peace in the AtticReyk Floeter
ok brad@
2006-05-21Pretty print netmasks in monitor mode.Marco Pfatschbacher
From Alexander Bluhm <Alexander_Bluhm at genua.de> OK henning@
2006-05-18paramter -> parameterMiod Vallat
2006-05-17various fixes;Jason McIntyre
2006-05-17Document recent sysctl additions.Gordon Willem Klok
ok jmc@, deraadt@
2006-05-17implement support for sppp(4) in ifconfig. have a look at the updatedReyk Floeter
manual pages pppoe(4) and sppp(4) for examples. the spppcontrol(8) utility is not required anymore and will probably be removed in the near future. ok deraadt@
2006-05-16change only use of slice to 'partition letter' to be consistent withKevin Steves
use of partition everywhere else; ok jmc@
2006-05-15permit proto 0; ok hshoexerTheo de Raadt
2006-05-15whitespace cleanupFelix Kronlage
ok claudio@, mbalmer@
2006-05-15delete weird CTheo de Raadt
2006-05-14better english to describe interfaces without bandwidth info; ok henningTheo de Raadt
2006-05-12put back original getopt(3) handling lost during the updateMartin Reindl