summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2004-05-07typosHenning Brauer
From: Jared Yanovich <phirerunner@comcast.net>
2004-05-06remove more unused codeTheo de Raadt
2004-05-06Support ADSL routers running in half-bridge mode or acctuallyClaudio Jeker
almost-broken mode. It seems these devices do proxyarp for the whole internet and do not provide a real default gateway. Fix for and from PR3747 by Andrew Basterfield. OK deraadt@ makes sense krw@
2004-05-06KNF cleanup. hshoexer@ okHakan Olsson
2004-05-06Obsolete. jakob@ ok.Hakan Olsson
2004-05-05Use RFC1323 PAWS timestamps as a logical extension to the conventional TCPMike Frantzen
sequence numbers by taking advantage of the maximum 1KHz clock as an upperbound on the timestamp. Typically gains 10 to 18 bits of additional security against blind data insertion attacks. More if the TS Echo wasn't optional :-( Enabled with: scrub on !lo0 all reassemble tcp ok dhartmei@. documentation help from jmc@
2004-05-05line wrapTheo de Raadt
2004-05-05knfTheo de Raadt
2004-05-05spacingTheo de Raadt
2004-05-05use strtonum all over the place; ok pb millertTheo de Raadt
2004-05-05must simulate daemon because already inside the jail; henning okTheo de Raadt
2004-05-05bpf write filter, and lockTheo de Raadt
2004-05-05open the lease file after the priv child was forked off so it doesn't haveHenning Brauer
a copy of this fd
2004-05-05routefd needs to be opened slightly laterHenning Brauer
2004-05-05use tzset() before chrootingHenning Brauer
2004-05-05open bpf and routefd a little later, after forking the priv child so itHenning Brauer
doesn't get copies of those fds
2004-05-04do not overload libc function names causing linker troublesMichael Shalayeff
2004-05-04knfTheo de Raadt
2004-05-04remove things not used, spotted by lint mostly; ok henningTheo de Raadt
2004-05-04use SIZE_T_MAX, canacarHenning Brauer
2004-05-04more shrink and lint fixes; henning okTheo de Raadt
2004-05-04$OpenBSD$Henning Brauer
2004-05-04from jared yanovich:Jason McIntyre
- better macros in SYNOPSIS - rewording - document the `rules' command - shift EXAMPLES to standard format
2004-05-04prevent the len params from overflowing, catched by & ok canacarHenning Brauer
2004-05-04Fix memory leak, ok henning@Can Erkin Acar
2004-05-04zap some spacesTheo de Raadt
2004-05-04privilege seperate dhclient.Henning Brauer
the privileged child's duty is the dhclient-script env setup & exection. the parent process now chroots to /var/empty and drops privileges to _dhcp mostly hacked at vancouver airport with some feedback from krw@ and otto@, tested to not break installs by krw@
2004-05-03KNF. ok ho@Hans-Joerg Hoexer
2004-05-03Use libc strtonum, not private copy. Based on a diff from tedu@.Todd C. Miller
OK otto@
2004-05-03Remove OpenBSD/pegaos, this has been announced before but delayed untilDale Rahn
the tree was stable. No point in code supporting a company which screws its employees being in the OpenBSD tree.
2004-04-29Better checking of minimum payload lengths. Drop out safely when an unknownHans-Joerg Hoexer
payload type is encountered. While around, do some KNF. ok ho@
2004-04-28remove unused variable and shorten names of two other. Removed some spacesHans-Joerg Hoexer
while around. ok ho@ markus@
2004-04-28Reserve some payload numbers for RFC 3547 and the earlier NAT-T drafts. ↵Hakan Olsson
hshoexer@ ok.
2004-04-28fd leaks; henning okTheo de Raadt
2004-04-27clean up ifdef hellPhilipp Buehler
2004-04-27make "pfctl -vvsq" to print "No queue in use" and exit when there is noKenjiro Cho
queue to show the state. requested by "Alexey E. Suslikov" <cruel@texnika.com.ua> ok henning@
2004-04-27reworking of man page and sync/update usage();Jason McIntyre
this stuff is based mostly on diffs from jared yanovich, with some stuff from myself and otto; ok naddy@ otto@ markus@ deraadt@
2004-04-27don't loop forever on 0-size extensionsMarkus Friedl
2004-04-27missing ';' in actually unreached code (pointed out by logix(at)franken.de)Philipp Buehler
2004-04-26fix route with explicit -gateway modifier. ok deraadt@ itojun@Cedric Berger
2004-04-26do more careful altq bandwidth checking.Kenjiro Cho
- fix a bug in HFSC that does not take the newly added queue into account when computing the bandwidth for admission control. - warn when the sum of the child bandwidth exceeds parent's bandwidth for both CBQ and HFSC. - allow to explicitly specify 0bps to bandwidth. HFSC can have only the real-time sc, and it means a blackhole queue for CBQ. problem reports by "Alexey E. Suslikov" <cruel@texnika.com.ua> ok henning@
2004-04-25unifdef -DSMALL_KERNELJun-ichiro itojun Hagino
2004-04-25have a localcopy of radix.c hereJun-ichiro itojun Hagino
2004-04-25unbreak treeMarkus Friedl
2004-04-24Add "probability xxx" rule modifier. ok deraadt@Cedric Berger
2004-04-24Compile the basic wscons userland tools on luna88k.Miod Vallat
2004-04-24Define wscons device ids for the Luna devices.Miod Vallat
2004-04-23Make sure KEY_LENGTH attribute is present when checking AES proposals,Hakan Olsson
required when acting as responder to SafeNet peers. Also make conf_load_defaults() readable again (KNF). hshoexer@ ok.
2004-04-22typo, From: Jared Yanovich <jjy2+@pitt.edu>Henning Brauer
2004-04-21Mention that luna88k can poweroff; also add an boot_amd64(8) reference while ↵Miod Vallat
there.