Age | Commit message (Collapse) | Author | |
---|---|---|---|
2006-04-02 | malloc(x * y) -> calloc(x, y) from adobriyan AT gmail.com, with tweaks | Damien Miller | |
suggested by kjell@; ok otto@ pat@ millert@ jaredy@ | |||
2006-04-02 | use SEEK_* for lseek() | Theo de Raadt | |
2006-04-01 | Do not attempt to print parameters which turned out to be dead; fixes PR#5066. | Miod Vallat | |
2006-03-31 | tweaks; | Jason McIntyre | |
2006-03-31 | Be careful when accessing the external destination address, as it is not set | Hans-Joerg Hoexer | |
for bypass and deny flows. Also display acquire/dontacquire flows. ok henning@ | |||
2006-03-31 | wenn dumping rules always show type, srcid and dstid (if set). | Hans-Joerg Hoexer | |
ok reyk@ | |||
2006-03-31 | allow do delete dynamic rules | Hans-Joerg Hoexer | |
ok reyk@ | |||
2006-03-31 | allow specification of encapsulated protocol for ike; ok hshoexer | Markus Friedl | |
2006-03-31 | allow specification of encapsulated protocol for flows; ok hshoexer | Markus Friedl | |
2006-03-31 | uppercase `ip'; | Jason McIntyre | |
2006-03-31 | Super block changes for FFS2, thanks to all who tested. | Pedro Martelletto | |
Silent okay after almost 3 weeks, hackers@. | |||
2006-03-30 | when resolving interface names to ip adresses, set netmask to all bits 1 | Hans-Joerg Hoexer | |
2006-03-30 | Print the "Encap" heading only when the sadb is not empty. | Hans-Joerg Hoexer | |
Fix identation (was off by one space). both requested and ok markus@ | |||
2006-03-30 | allow specification of outer local ips in flows (SADB_EXT_ADDRESS_SRC); ok ↵ | Markus Friedl | |
hshoexer, reyk | |||
2006-03-30 | document -encap. ok claudio@ | Hans-Joerg Hoexer | |
2006-03-30 | If an address family is specified do not print IPSec "routes". Additionally | Claudio Jeker | |
add a -encap option to show only the IPSec part. OK hshoexer@, henning@ | |||
2006-03-30 | Minor cleanup and start using rmx_refcnt to show the refcount instead of 0. | Claudio Jeker | |
OK henning@ | |||
2006-03-30 | Really ignore sendpipe, recvpipe, rtt, rttvar, etc. in route(8) instead of | Claudio Jeker | |
passing these values to the kernel where they get ignored anyway. OK henning@ | |||
2006-03-30 | Document 'F' as an answer to fsck, okay deraadt@ jolan@ | Pedro Martelletto | |
2006-03-30 | when asking y or n, accept "F" which forces yes from the on. i have | Theo de Raadt | |
wished for this for 10+ year, but always forgotten to make the change after cleaning up a nasty file system; ok pedro millert | |||
2006-03-29 | Use sysctl to get information about encap routes (aka ipsec). Now | Hans-Joerg Hoexer | |
you see something actually useful... requested by and ok henning@ | |||
2006-03-26 | fix output of ``ccdconfig -gv'': one typo, and one missing \t | Alexander von Gernler | |
mickey@ ok | |||
2006-03-23 | Print the lladdr on carp interfaces. | Ryan Thomas McBride | |
ok henning@ | |||
2006-03-23 | Fix pretty-print of carp link addresses by making them print like IFT_ETHER. | Ryan Thomas McBride | |
Diff from jon@abccomm.com | |||
2006-03-23 | sloppy style to cast the sockaddrs backwards, and then potentially wrong ↵ | Theo de Raadt | |
size; ok cloder | |||
2006-03-22 | earlier asprintf diff caused malloc in signal handler. clarify the | Theo de Raadt | |
code a bit more so that this mistake will not be done again | |||
2006-03-22 | add support for macros in ipsec.conf(5). some bits have already been | Reyk Floeter | |
there. requested by david@ ok hshoexer@, msf@ | |||
2006-03-22 | No need to specify the DOI, make examples more consistent. | Hans-Joerg Hoexer | |
Suggested by david@ | |||
2006-03-21 | Correctly check for the end of the cmds table. There is no need to check for | Claudio Jeker | |
c_func2. Until now ifconfig accepted something like ifconfig tun0 1.2.3.4 1.2.3.5 foobar without error. Additionally change the error message to a more comprehensible message. OK markus@, henning@ | |||
2006-03-21 | instead of sizeof(array) / sizeof(element) computation, use the existing | Daniel Hartmeier | |
end-of-array NULL marker, shuts up source analysis tool, from deraadt@ | |||
2006-03-20 | NetBSD Coverity CID 2298: Fix memory leak. | David Hill | |
NetBSD Coverity CID 2299: Fix memory leak. NetBSD Coverity CID 2301: Fix memory leak. ok ray@ | |||
2006-03-20 | Don't increment a pointer *before* testing it for NULL | David Hill | |
ok deraadt@ | |||
2006-03-20 | NetBSD Coverity CID 2302: Free fat if fatal error to avoid leak. | David Hill | |
ok otto@ deraadt@ | |||
2006-03-20 | NetBSD Coverity CID 774: Don't increment a pointer *before* testing it for NULL! | David Hill | |
ok otto@ | |||
2006-03-20 | NetBSD Coverity CID 2074: Fix memory leak. | David Hill | |
ok deraadt@ | |||
2006-03-20 | NetBSD Coverity CID 1745: Fix memory leak. | David Hill | |
yes otto@ | |||
2006-03-20 | NetBSD Coverity CID 2305: Fix memory leak. | David Hill | |
ok deraadt@ | |||
2006-03-20 | When being verbose while deleting ike rules (-dv), print deletions instead of | Hans-Joerg Hoexer | |
additions. Suggested by david@ | |||
2006-03-20 | When adding a connection, do not explicitly start that connection | Hans-Joerg Hoexer | |
using "t" and "c" fifo commands. This is prone to a race when adding several tunnels between the same peers. Just let isakmpd start that connection on its own (using the connection checker). | |||
2006-03-20 | make sure the command fifo is ready before isakmpd returns. This | Hans-Joerg Hoexer | |
resolves a startup race when interacting with ipsecctl. Suggested by and discussed with moritz@ ok moritz@ | |||
2006-03-19 | Fix mem leaks in error path. From NetBSD's coverity analysis. ok pat@ | Otto Moerbeek | |
deraadt@ | |||
2006-03-17 | Off-by-one; from NetBSD's coverity analysis; ok millert@ | Otto Moerbeek | |
2006-03-16 | typo. | Alexandre Anriot | |
ok otto@ | |||
2006-03-14 | implement a Unicast Reverse Path Forwarding (uRPF) check for pf(4) | Damien Miller | |
which optionally verifies that a packet is received on the interface that holds the route back to the packet's source address. This makes it an automatic ingress filter, but only when routing is fully symmetric. bugfix feedback claudio@; ok claudio@ and dhartmei@ | |||
2006-03-13 | Cleanup and plug a fe memleaks and; from Davif Hill with a twist from | Otto Moerbeek | |
myself. | |||
2006-03-12 | Add the -s flag, meaning: skip mount if the file system is | Otto Moerbeek | |
already mounted. This flag is very handy when mounting mfs partitions. The -s flag will be used in an upcoming etc/rc diff. ok henning@ deraadt@ | |||
2006-03-12 | use asprintf instead of a static buffer; dhill, tested by pedro | Theo de Raadt | |
2006-03-09 | Remove -n from synopsis too | Pedro Martelletto | |
2006-03-09 | Remove option -n from newfs as well as all references to fs_postbl() | Pedro Martelletto | |
Various testing for a while, okay krw@ | |||
2006-03-07 | add support for special "bypass" and "deny" flows. | Reyk Floeter | |
ok hshoexer@, thanks jmc@ |