Age | Commit message (Collapse) | Author | |
---|---|---|---|
2013-08-11 | capitalize RAID in one spot. | Brad Smith | |
2013-08-02 | Remove an incorrect call to pfctl_print_rule_counters when trying to | Mike Belopuhov | |
print out anchor rules recursively; unbreaks pf1.loaded regress test. ok lteo, henning | |||
2013-08-01 | Provide local implementations of if_nametoindex(3) and if_indextoname(3) | Mike Belopuhov | |
that make use of the cache of addresses populated by the ifa_load on startup to save the trouble of calling expensive getaddrinfo(3) up to four times per rule. Performance wise this change provides a speed up factor of 20 with a 11k line ruleset on a machine with 150 VLANs and 250 IP addresses (20 seconds down to 1 in this case). "wow!" henning, ok benno, florian | |||
2013-07-21 | In getmntname(), iterate through the list of mount points from | Todd C. Miller | |
end to beginning instead of from beginning to end. This matches the behavior of umountall() and fixes "umount -a" in cases where there are multiple file systems on the same mount point. Based on a diff from naddy@. OK naddy@ guenther@ | |||
2013-07-21 | zap one redundant line, replacing it with a note that although | Jason McIntyre | |
SYNOPSIS suggests no options are neccessary, in fact a minimum of one is required; ok henning | |||
2013-07-21 | tidy up DESCRIPTION somewhat, and format nicer; | Jason McIntyre | |
ok henning | |||
2013-07-21 | re-zap the previous paragraph, but this time in its place document | Jason McIntyre | |
what happens when a broken pf config is encountered, both generally and at system startup; ok henning | |||
2013-07-20 | reverting previous until i can work out what henning is telling me... | Jason McIntyre | |
2013-07-19 | Prep for WARNINGS=yes: add the prototypes that were missing, silence | Philip Guenther | |
a "signed vs unsigned in conditional" warning, and eliminate what looks like an unintentional variable shadowing. ok bluhm@ | |||
2013-07-19 | Compile /sbin/route with -Wall enabled. | Alexander Bluhm | |
OK deraadt@ | |||
2013-07-19 | remove redundant paragraph; from Pieter Verberne | Jason McIntyre | |
2013-07-18 | Revert 1.191 and 1.193 and fix the original problem (access to the last | Philip Guenther | |
filesystem, currently ext2fs) by increasing maxtypenum sufficiently. suggested by Rafael Neves (rafaelneves (at) gmail.com) | |||
2013-07-18 | Correct off-by-one in naming of nodes below vfs.mounts. | Philip Guenther | |
problem noted by Rafael Neves (rafaelneves (at) gmail.com) ok jca@ | |||
2013-07-16 | Add missing .Mt macros for AUTHORS email addresses. | Ingo Schwarze | |
From Jan Stary <hans at stare dot cz>. ok jmc@ | |||
2013-07-16 | Make sure the ioctl(2) has been processed by sppp(4) before printing | Martin Pieuchot | |
any phase error. This prevents ifconfig(8) from priting 'sppp: phase...' messages for vlan(4) interfaces attached to interfaces with a long name. A better fix should be cooked because various pseudo-interfaces still use the same set of ioctl(2)s for different purposes. Issue reported by jca@, ok claudio@, jca@ | |||
2013-07-15 | If a DHCPREQUEST returns a lease identical to the one currently bound to | Kenneth R Westerback | |
the interface, skip the address deleting/adding and route deleting/adding and simply update the timestamps. Suggested by sthen@. Tweaks from millert@. ok sthen@ millert@ | |||
2013-07-14 | merge the relevant bits of dhcp(8) into dhclient(8) and dhcpd(8), | Jason McIntyre | |
removing traces of dhcp(8)... i'm about to remove that file, since it's essentially useless. holding off for a little, in case my commit is greeted with howls. help/ok krw | |||
2013-07-14 | "r" logs to syslog; From: Anders Berggren | Jason McIntyre | |
ok millert sthen | |||
2013-07-11 | update (or add) STANDARDS; | Jason McIntyre | |
help/ok krw | |||
2013-07-11 | Put more debug verbiage under DEBUG. Add a few more debug messages. | Kenneth R Westerback | |
Make packet discarding decisions before parsing the packet's possible options. No intended functional change. | |||
2013-07-10 | Change the structure used in the SPPPIOSDEFS and SPPPIOGDEFS ioctls | Martin Pieuchot | |
to only include what is really needed. In particular stop including a "struct ifnet" and move kernel-only definition into the proper #if dance. While here remove the unused spppinfo() from ifconfig. ok guenther@, sthen@, mikeb@ | |||
2013-07-07 | Remove erroneous warnings -- we do not reject offers just because the | Kenneth R Westerback | |
option buffer(s) end badly. | |||
2013-07-06 | Tone down verbosity by putting the "Unexpected <blah>" messages under | Kenneth R Westerback | |
#ifdef DEBUG. They were mostly for, well, debugging. | |||
2013-07-06 | Fix a lie in one comment and zap a pointless sentence in another. | Kenneth R Westerback | |
2013-07-06 | Zap leading whitespace. | Kenneth R Westerback | |
2013-07-05 | Zap trailing whitespace. | Kenneth R Westerback | |
2013-07-05 | More a.out files leave the party. | Miod Vallat | |
2013-07-05 | ELF_TOOLCHAIN bye bye. | Miod Vallat | |
2013-07-05 | Collect and display 'match' counters for pf tables. | Bret Lambert | |
While here, fix pf table displays to fit within 80 chars. Manpage input jmc@ ok henning@ reyk@ | |||
2013-07-02 | Long passwords could not be replaced completely with shorter | Alexander Bluhm | |
passwords. ioctl(SIOCGVH) fills the carpr_key with the old value. strlcpy() overwrites only the beginning of the key. Add a bzero() to clear the rest. Testing Jan Klemkow; OK florian@ mpf@ | |||
2013-06-29 | do not use Sx for sections outwith the page; | Jason McIntyre | |
man4 still to go... | |||
2013-06-19 | Do not install pcap-int.h to /usr/include as it is an internal library | Lawrence Teo | |
header (pointed out by matthew@). Let only pflogd and tcpdump include pcap-int.h directly since they need it for privilege separation. "looks good" sthen feedback/ok deraadt matthew millert | |||
2013-06-18 | Initialize duid memory before shifting stuff into elements of it. | Kenneth R Westerback | |
No doubt quiets one or more of the fringe compilers out there. Use variable 'part' rather than recalculating same value in the subsequent printf(). From dhill. ok otto@ | |||
2013-06-18 | Don't use inet_ntoa() twice in one parameter list. You'll just print | Kenneth R Westerback | |
one of the strings twice. Spotted by mpi@, who also tweaked the diff by pointing out INET_ADDRSTRLEN. Should fix mysterious messages like "1.2.3.4, not 1.2.3.4, deleted from ...". | |||
2013-06-18 | Split RTM_NEWADDR and RTM_DELADDR handling into separate cases | Kenneth R Westerback | |
rather than 1 case with a check to see which messages it was. More code duplication, easier to read. No functional change. | |||
2013-06-17 | Check calloc() return value. Plug leak of resulting memory. | Kenneth R Westerback | |
Latter from dhill. | |||
2013-06-13 | Add support for protected-subnet config types. | Reyk Floeter | |
From Ryan Slack | |||
2013-06-11 | final removal of daddr64_t. daddr_t has been 64 bit for a long enough | Theo de Raadt | |
test period; i think 3 years ago the last bugs fell out. ok otto beck others | |||
2013-06-09 | Make route adding interface more flexible by passing flags to be | Kenneth R Westerback | |
used rather than deducing them. Use priv_add_route() to add the 127.0.0.1 address when adding an address. | |||
2013-06-09 | Fix/clarify some comments. do memset()'s only when variable is going | Kenneth R Westerback | |
to be used. | |||
2013-06-09 | Re-apply static route and classless static route support -- this time | Kenneth R Westerback | |
passing the correct destination for the default route, '0.0.0.0', rather than the new lease address. Populating egress group works this time. Problem found the hard way by Chris Smith. | |||
2013-06-09 | Re-apply route adding code refactoring -- it wasn't the problem that | Kenneth R Westerback | |
broke populating the egress group. | |||
2013-06-09 | add fuse sysctls, from Sylvestre Gallon | Ted Unangst | |
2013-06-09 | fix an off by one preventing access to the last filesystem. | Ted Unangst | |
from Sylvestre Gallon | |||
2013-06-09 | Add back backslash fixes caught in rollback. | Kenneth R Westerback | |
2013-06-09 | Backout static/classless route handling and default route refactoring | Kenneth R Westerback | |
since the former relies on the latter and the latter breaks 'egress' group populating. | |||
2013-06-08 | Add new sysctl for pipex packet input/output queue length and | YASUOKA Masahiko | |
counters. ok guenther, feedback jmc | |||
2013-06-04 | Add support for static routes option (33) and classless static | Kenneth R Westerback | |
routes option (121). ok sthen@ | |||
2013-06-04 | Fix "\" escape handling in read_string(). | Kenneth R Westerback | |
Problem noted, fix tested and ok sthen@. | |||
2013-06-03 | sprinkle $OpenBSD$, pointed out by pedro | Marc Espie | |