summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2005-05-26Handle strdup returning NULL. OK hshoexerChad Loder
2005-05-26switch the max_src_{states,conn,conn_rate} from superblock breaks to superblockMike Frantzen
optimization barriers to prevent table merging or rule re-ordering ok dhartmei@
2005-05-26disallow interface group names that end in a digit to differentiate them fromMike Frantzen
true interfaces ok henning@
2005-05-26remove reference to MNT_UNIONPedro Martelletto
2005-05-26bye byePedro Martelletto
2005-05-26remove the stackable filesystemsPedro Martelletto
2005-05-26Clean up some cleanup code. Fixes at least one leak, possibly more.Chad Loder
OK hshoexer
2005-05-25make the remaining pf_rule fields named superblock BREAKs instead just lettingMike Frantzen
them default to BREAKs. no functional change
2005-05-25make the optimizer safe in the presence of interface groups. they must act asMike Frantzen
an optimization block break ok dhartmei@
2005-05-25Fix a commentHans-Joerg Hoexer
2005-05-25rearrange order of messages sent to the kernelHans-Joerg Hoexer
2005-05-25set incoming flows to "use", outgoing to "require"Hans-Joerg Hoexer
2005-05-25prepare for new sysctl interface, not used yetHans-Joerg Hoexer
2005-05-25do not swap srcid/dstid for INOUT rules.Hans-Joerg Hoexer
2005-05-25use bzeroHans-Joerg Hoexer
2005-05-25add ifconfig -M option to replace wicontrol -L and -l for ap scanningReyk Floeter
and node listing. wicontrol is not supported by net80211 drivers anymore. further improvements will be done. ok dlg@, jsg@
2005-05-25aesctr and null supportMarkus Friedl
2005-05-24Identify states that will not be synchronised in pfctl -vvss output.Christopher Pascoe
ok mcbride@ henning@
2005-05-24fix minor ouput glitch, by using strtonum instead of strtol.Moritz Jodeit
ok millert@
2005-05-24support trunk stacking (trunks as trunk ports) and some fixesReyk Floeter
ok brad@
2005-05-24add net.inet.ip.ifq for monitoring and changing ifqueue; similar to netbsdMarkus Friedl
ok henning
2005-05-24kill unneeded exit(). log_fatal() already does it. ok hshoexer@Moritz Jodeit
2005-05-24no more 'ifconfig $if 0.0.0.0 up' only 'ifconfig $if up' since dhclientTodd T. Fries
uses bpf exclusively ok deraadt@, henning@, claudio@
2005-05-24typoMoritz Jodeit
2005-05-24initial import of a trunking (link aggregation and link failover)Reyk Floeter
implementation. it currently supports round robin mode with link state checking, additional modes will be added later. ok brad@, deraadt@
2005-05-23change pool allocation of table entries, no longer use the oldnointrDaniel Hartmeier
allocator and two pools, but PR_WAITOK when called from non-interrupt context (ioctl). add configurable hard limits for tables and table entries (set limit tables/table-entries), defaulting to 1000/100000. ok aaron@, henning@, mcbride@, art@
2005-05-23Mention interface names can be used in Listen-on. OK hshoexerChad Loder
2005-05-23minor memset->bzero, clarify an error condition, and plug a leak.Kjell Wooding
ok cloder@, unpronounceable@
2005-05-23endpwent() not needed here, pointed out by theo.Hakan Olsson
2005-05-23endpwent() after last use. hshoexer@ okHakan Olsson
2005-05-23remove code that duplicates getservice()Camiel Dobbelaar
ok dhartmei mcbride
2005-05-23tap. tap. is this thing on?Kjell Wooding
KNF, Fix a typo in an ENUM, Xr to ipsec.conf no binary change ok hshoexer@
2005-05-22Add support to kill states that match networks.Marco Pfatschbacher
man page from jmc@ OK dhartmei@
2005-05-22No more ifdef KAME. From hshoexerChad Loder
2005-05-22rewrite the interface groups printing code:Henning Brauer
don't rely on the interface's driver-name based group to be the first in the list don't rely on one group == only default one do not print the "all" group don't segfault on interfaces with no group at all ok mcbride
2005-05-21clean up and rework the interface absraction code big time, rip out multipleHenning Brauer
useless layers of indirection and make the code way cleaner overall. this is just the start, more to come... worked very hard on by Ryan and me in Montreal last week, on the airplane to vancouver and yesterday here in calgary. it hurt. ok ryan theo
2005-05-19sort options + sync usage();Jason McIntyre
2005-05-19p's and q's;Jason McIntyre
2005-05-18remove certpatch(8) stuff;Jason McIntyre
ok hshoexer@
2005-05-18bye byeHans-Joerg Hoexer
2005-05-18bye byeHans-Joerg Hoexer
2005-05-18there's no need for certpatch anymore, so remove itHans-Joerg Hoexer
ok markus some time ago
2005-05-18allow payload types 20 and 21 for nat-tHans-Joerg Hoexer
ok ho
2005-05-14more logical section order;Jason McIntyre
2005-05-14- openssl req can create self-signed certs in one stepJason McIntyre
- no need to encourage people to generate system keys: rc(8) already does it ok hshoexer@
2005-05-14Give example of how to spin down a device since this is a questionTodd C. Miller
that comes up periodically.
2005-05-12add some missing section descriptions to make this page a littleJason McIntyre
easier to read; ok hshoexer@
2005-05-10no need to use select()Hans-Joerg Hoexer
ok moritz cloder
2005-05-07Add support for the domain keyboards, and simplify the kbd -l logic.Miod Vallat
2005-05-07Check for kvm_nlist failure to retrieve all keyboard map symbols, and doMiod Vallat
not dispaly garbage in this case.