summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2008-06-11remove an ugly article;Jason McIntyre
2008-06-10reduce mem usage by about 20% by packing state and type of an inode in a singleOtto Moerbeek
byte. Original diff by drahn@; twists by me; ok millert@ thib@
2008-06-10Arguments to fifo commands were limited to 80 bytes. That is tooAlexander Bluhm
short for IPv6. Increase the buffer size from 80 to 200 where appropriate. For the M command a buffer for 10 bytes is sufficient. ok hshoexer@ mpf@ grunk@
2008-06-10Make counters on table addresses optional and disabled by default.Ryan Thomas McBride
Use the 'counters' table option in pf.conf if you actually need them. If enabled, memory is not allocated until packets match an address. This saves about 40% memory if counters are not being used, and paves the way for some more significant cleanups coming soon. ok henning mpf deraadt
2008-06-10save somespace in the state by collapsing two 8 bit ints used as booleansHenning Brauer
into one 8 bit flags field. shrinks the state structure by 4 bytes on 32bit archs ryan ok
2008-06-10sleep if the slave device of the pty(4) is not connected.Marc Balmer
problem noticed by ckuethe, solution discussed with claudio
2008-06-10Fix implementation of IN6_IS_ADDR_FULL so that IPV6_ADDR is usedAlexander Bluhm
instead of IPV6_ADDR_SUBNET where appropriate. Then isakmpd has the same behaviour for IPv6 and IPv4. ok markus@
2008-06-10better take the size of the right table; found while tinkering with fsck_ffsOtto Moerbeek
by accident the buggy expression yields the same value.
2008-06-10print sizeofs using %zu; ok joris@Otto Moerbeek
2008-06-10in verbose mode indicate which states are sloppy, ryan reyk theoHenning Brauer
2008-06-10new state option "sloppy" to use the sloppy tcp state tracker insteadHenning Brauer
of the good one. ok theo ryan reyk
2008-06-10correctly setup the tty line for NMEA devices, especially turn off echoMarc Balmer
to the device. found by ckuethe, fixed and tested with ckuethe
2008-06-09Don't reverence slattach(8) or nmeaattach(8) in a comment.Marc Balmer
2008-06-09- move the "this app is deprecated" blurb to the start, where it's moreJason McIntyre
likely to be read - sort SEE ALSO
2008-06-09zap trailing whitespace;Jason McIntyre
2008-06-09Remove nmeaattch(8), which is superseeded by ldattach(8).Marc Balmer
ok deraadt
2008-06-09nmeaattach(8) is now deprecated. Use ldattach(8) instead.Marc Balmer
2008-06-09slattach(8) is now deprecated. Use ldattach(8) instead.Marc Balmer
2008-06-09The new newfs(8) code causes alternate superblocks to end up inOtto Moerbeek
different locations than before. Actually, the disklabel does not contain enough info to completely reconstruct the locations of all alternate sb's. So use a hardcoded list of all possible 1st alternate sb locations, but don't forget to verify against the label. ok millert@ thib@
2008-06-09Add the '-p' option to ldattach(8) to pass data received from the deviceMarc Balmer
to the master device of a pty(4) pair. The name of the slave device is written to standard output. This is useful for applications like e.g. gpsd from the misc/gpsd port that also use the serial data stream (e.g. nmea(4) as a time source and gpsd to get at positional data). help and ok deraadt, makes ckuethe happy.
2008-06-08fix generated size for -m; bug report by Peter J. Philipp; ok millert@Otto Moerbeek
deraadt@
2008-06-07stop spurious "got link" which nooone noticed, but everyone should have; ok krwTheo de Raadt
2008-06-04warnx already prepends string with a colon, no need to manually add oneTobias Stoeckmann
here. ok millert, otto
2008-06-04setbootflag() must be done before checksum'ing the label. Bug introducedTheo de Raadt
in 1.126, found by nick during a test install; ok krw
2008-06-03fix some spacing issues;Jason McIntyre
2008-06-01synchronize synopsis and usage.Igor Sobrado
2008-05-31add hfs+ type. deraadt@ okFederico G. Schwindt
2008-05-29Second half of PF state table rearrangement.Ryan Thomas McBride
- Mechanical change: Use arrays for state key pointers in pf_state, and addr/port in pf_state_key, to allow the use of indexes. - Fix NAT, pfsync, pfctl, and tcpdump to handle the new state structures. In struct pfsync_state, both state keys are included even when identical. - Also fix some bugs discovered in the existing code during testing. (in particular, "block return" for TCP packets was not returning an RST) ok henning beck deraadt tested by otto dlg beck laurent Special thanks to users Manuel Pata and Emilio Perea who did enough testing to actually find some bugs.
2008-05-27Fix count of states flushed, broken when the psnk_af hack was removed in ↵Ryan Thomas McBride
pf_ioctl.c r1.196.
2008-05-26no need for such a wordy .Nd; ok grunkJason McIntyre
2008-05-26- put CAVEATS in the right placeJason McIntyre
- filesystem -> file system, for consistency; from Pierre Riteau
2008-05-26fix example in manpage, spotted by Jacek MasiulaniecAlexander von Gernler
While there, stress the idea that users should always have a disklabel inside their vnd images, so they can fsck their filesystems properly input from otto@, corrections by jmc@, "looks better" deraadt@
2008-05-26reorg fields in structs inodesc and inoinfo to reduce size on some archs; fromOtto Moerbeek
mickey; ok millert@
2008-05-26If an interface has no link at startup, try to force it up, and thenTheo de Raadt
give it about 4 seconds of (silent) grace period before doing the verbose search for a link... tested by various developers who got burned a bit
2008-05-25do not need sys/protosw.hTheo de Raadt
2008-05-16no need to quote the argument to .Nd, now that it's nice and short;Jason McIntyre
2008-05-16There is not really a network address translation device.Marco Pfatschbacher
Remove it from the name section. OK mcbride, henning
2008-05-13Disable more wscons bits on socppc.Miod Vallat
2008-05-13Make socppc on par with macppc for now.Miod Vallat
2008-05-13fix an error in the example partition table; from Adam PattersonJason McIntyre
ok nick
2008-05-12Error out with usage line if additional arguments are given after thePierre-Yves Ritschard
option parsing. Found out the hard way by jdixon on ifstated. ok sobrado@, jdixon@, millert@
2008-05-09Add support to kill states by rule label or state id.Marco Pfatschbacher
Fix printing of the state id in pfctl -ss -vv. Remove the psnk_af hack to return the number of killed states. OK markus, beck. "I like it" henning, deraadt. Manpage help from jmc.
2008-05-09Replace a crockpot of semi-cloned productions for handling portTheo de Raadt
numbers with one, and fix a few other bugs along the way ok mpf henning
2008-05-09using the rtm_priority to translate priority number into nice name isHenning Brauer
working much better than using rtm_version for that
2008-05-09on route get, display the priority and a cleartext name (like, "bgp" for 48)Henning Brauer
claudio ok
2008-05-09convert port byte order in the production; add port keyword; ok deraadt@Markus Friedl
2008-05-09- don't give up when the link is not available on startup: dhclientReyk Floeter
goes to background and listens on the routing socket for link to come up before it retries. - renew the lease whenever the link was lost and becomes active again. - listen for link state changes on non-ethernet devices like wireless, the link state becomes active when the wireless has been associated to the AP and becomes active. this helps to automatically renew the lease when the user is roaming. ok beck@, deraadt@
2008-05-09divert packets to local socket without modifying the ip header;Markus Friedl
makes transparent proxies much easier; ok beck@, feedback claudio@
2008-05-08add missing header for exitCharles Longeau
ok damien@
2008-05-08make "to any" optional in binat, or well, the implied default.Theo de Raadt
requested by reyk, ok reyk mpf