summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2006-12-16make /sbin/dhclient-script consistent with other paths; ok henning@Kevin Steves
2006-12-16various small improvements;Jason McIntyre
2006-12-15KNFKevin Steves
2006-12-15typo in commentKevin Steves
2006-12-15sync w/ usage(); ok pedroJason McIntyre
2006-12-15use "special" and "node" for synopsis/usage() here too;Jason McIntyre
2006-12-15sync usage();Jason McIntyre
2006-12-15sort options; sync usage;Jason McIntyre
2006-12-15sort options; sync usage;Jason McIntyre
2006-12-15sort options; sync usage;Jason McIntyre
2006-12-15some Nm blips, from mk;Jason McIntyre
2006-12-15reduce RFC2292/3542 #ifdefs.Jun-ichiro itojun Hagino
while here, correct type mismatch (socklen_t) and adjust AH handling to OpenBSD.
2006-12-15Nuke GEMDOSFS. Unused part of unused atari port. SimplifiesKenneth R Westerback
MSDOSFS code. Eliminates -G option to mount_msdos. Nit detection by gwk@, tom@, jmc@. ok weingart@ tom@ thib@ dlg@ deraadt@
2006-12-13IPv6 passive OS fingerprinting.Jun-ichiro itojun Hagino
reuses IPv4 signature file (assuming that TCP code is shared among IPv4/v6). mcbride ok.
2006-12-12a rewrite of enc.4, hopefully a little more useful than what we previouslyJason McIntyre
had; more can go in here, so feel free... many thanks to ho for feedback, and angelos and cedric who i harangued endlessly to explain nat/ipsec to me; the ipsec.conf.5 change just moves some stuff more appropriate to enc.4; ok hshoexer
2006-12-11refer to the RSTP point to point option as "PTP" instead of "P2P".Reyk Floeter
P2P is commonly used in relation to peer to peer networks, PTP is used in various protocols for layer 2 point to point links (ie., full duplex ethernet links). note that the newly added brconfig commands [-]p2p and [-]autop2p will change to [-]ptp and [-]autoptp. suggested by Andrew Thompson (thompsa@freebsd.org)
2006-12-10Read/write device sectors rather than assuming sector size ==Kenneth R Westerback
DEV_BSIZE. Simply extract/insert the desired MBR from/into the first DEV_BSIZE bytes of the sector. Makes fdisk work with devices having a sector size different from DEV_BSIZE (512 bytes). e.g. 2048 byte sector MP3 devices. Original diff from weingart@. ok pedro@ deraadt@ weingart@
2006-12-08state that if the log file is bad, it is first moved out of the way. ifJoel Knight
that fails, then logging is suspended.
2006-12-07remove extra dot; from jared r r spiegelJason McIntyre
2006-12-06styleMichael Knudsen
2006-12-06print readdirplus (rdplus) info for nfs mounts.Thordur I. Bjornsson
ok pedro@
2006-12-06SAD -> SADB; ok hshoexerJason McIntyre
2006-12-06typo; from Daniel Matic <maticd at gmail.com>joshua stein
2006-12-05plug memleak, noticed by jesus@mxtelecom.comHans-Joerg Hoexer
ok moritz@, tested by jesus@mxtelecom.com (thanks!)
2006-12-05some carp/sasyncd bits from msf and myself;Jason McIntyre
ok mpf
2006-12-05Don't leak message structures, when we see unsupported payloadsMoritz Jodeit
or if the payload node allocation fails. Also adjust a comment to make it more clear, who's responsible for freeing the message structs. Input from cloder@. OK hshoexer@
2006-12-04retreive -> retrieve;Jason McIntyre
2006-12-03Add Rapid Spanning Tree Protocol support (802.1d-2004) based on workReyk Floeter
by Andrew Thompson (thompsa@freebsd.org). The local changes include adoption to our bridge code, reduced stack usage and many other bits. If stp is enabled, RSTP will now be used by default. Thanks for help from Andrew. This code has been in snaps for while now, commit encouraged by deraadt@
2006-11-30typo: wrong rid for protocolMarkus Friedl
2006-11-30use rmv to unregister ipsec connections; ok hshoexer, hoMarkus Friedl
2006-11-30handle multiple SAs with different same src/dst but different port;Markus Friedl
store IKE connection string and phase2 IDs in the ipsec rule; cleanup internal API: pass rules around instead of rule members; report Brian Candler; fix with hshoexer, msf; ok hshoexer
2006-11-30new ui command 'rmv': removes an entry from a list, thus reversing anMarkus Friedl
'add' operation; ok ho, hshoexer, jmc eVS: ----------------------------------------------------------------------
2006-11-29no need to document generation of local.key 3 times;Jason McIntyre
spotted by mcbride, ok hshoexer;
2006-11-29zap trailing spaces;Jason McIntyre
2006-11-29tweak; ok henningJason McIntyre
2006-11-29Forgot this in my last committ: Remove not-needed header files.Marc Balmer
Also from Kevin Steves.
2006-11-29Remove an unused variable.Marc Balmer
From Kevin Steves.
2006-11-29Document the new location of local.pub, and clarify the fact that local.keyRyan Thomas McBride
contains the entire keypair. ok deraadt jmc
2006-11-29Document the new timestamping behaviour here, too, and note that enablingMarc Balmer
PPS is a device specific operation that might need special software (e.g. from our ports tree). gpsd is such an application and it has just been enabled to nicely play with the new timestamping.
2006-11-28add -T to synopsis;Jason McIntyre
2006-11-28add additional link states to report the half duplex / full duplexReyk Floeter
state, if known by the driver. this is required to check the full duplex state without depending on the ifmedia ioctl which can't be called in the kernel without process context. ok henning@, brad@
2006-11-28-T in synopsis and briefly in manpageHenning Brauer
2006-11-28do not re-add existing entries; ok hshoexerMarkus Friedl
2006-11-28fix servicecurve check; no point in checking the same sc three times, itHenning Brauer
was obviously intended to check all three. has been wrong since the beginning, 4 years... noticed by Earl Lapus <earl.lapus@gmail.com>, Vasil Dimov <vd@FreeBSD.org> mailed me then, ok mcbride
2006-11-27correct commentKevin Steves
2006-11-27Recognize when we are sending to a unicast destination IP address andKevin Steves
instead of using BPF, which currently will always set the destination MAC to broadcast, send using a SOCK_RAW socket and sendmsg() so the frame has a unicast destination MAC. Fixes an issue when using a bootp forwarder where unicast DHCPREQUESTs are dropped at the router/gateway until we reach T2/REBINDING and change the destination IP to broadcast. ok henning@ (but doesn't like using a raw socket for this)
2006-11-27remove invalid commentKevin Steves
2006-11-26repair missing DPADD requestsTheo de Raadt
2006-11-24add support to tag ipsec traffic belonging to specific IKE-initiatedReyk Floeter
phase 2 traffic. this allows policy-based filtering of encrypted and unencrypted ipsec traffic with pf(4). see ipsec.conf(5) and isakmpd.conf(5) for details and examples. this is work in progress and still needs some testing and feedback, but it is safe to put it in now. ok hshoexer@
2006-11-24fix typo for remote port; from Brian CandlerMarkus Friedl