summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2019-03-30Shuffle captive portal detection around.Florian Obser
While we are behind a captive portal we have to ask the dhcp provided resolvers. However it is possible that those resolvers do not like to talk to unwind because of EDNS0. Unwind handles this case by closing its listening socket and hands over to asr. Except for the resolving of the captive portal host which it still tries to resolve via libunbound. Turns out there is no need for this we can just use getaddrinfo_async from asr which then either hits unwind which does the right thing or unwind closed its listening socket and asr moves on to talk directly to the dhcp resolvers.
2019-03-30Fail on invalid netmasks when filling tableskn
Fix a regression of revision 1.326 "Zap v4mask and v6mask in host()" which allowed CIDR networks with more than one "/" to be loaded into tables. I took care of this code path with regard to rules coming the ruleset parser, which aborts earlier on such invalid specifications, but missed `-T add 1/2/3' and the like. Analyzed and fixed by Petr Hoffmann <petr dot hoffmann at oracle dot com>, thanks! OK deraadt
2019-03-30Do not try to print NULL with %s.Florian Obser
Brainfart pointed out by tb
2019-03-30update to libunbound 1.9.1; heavy lifting by sthen in unbound(8)Florian Obser
2019-03-29point readers to individual driver pages for notes on powersave; ok stspJason McIntyre
2019-03-27Add support for displaying fontwidth and fontheight values, this allowsFrederic Cambus
users to know the size of the currently used font. Based on a diff from Artturi Alm, thanks! OK sthen@, kettenis@, tedu@, jcs@
2019-03-27comment out the optional "duration" argument to powersave:Jason McIntyre
only two older cards currently attempt to set this, and it should not be neccessary anyway; i've added in a some (commented) info to explain this; discussed with and ok stsp
2019-03-26note that powersave is disabled by default (i.e. no need to explicitlyJason McIntyre
disable this), and provide a little more info on "duration"; some driver-specific notes hopefully to follow... help/ok stsp
2019-03-24Reduce debug logging in best_resolver() to two lines, helps a bit withFlorian Obser
seeing what is going on. There is still a lot to do wrt logging but it's not a priority yet.
2019-03-24recheck all resolvers when we are no longer behind a captive portalFlorian Obser
2019-03-24Do not check every resolver every 30 seconds as that is wasteful andFlorian Obser
pointless. Trigger a check - on startup - when forwarders change on config reload - when dhcp provided forwarders change - on network interface state change When a check finishes and the checked resolver cannot resolve anything configure a timer to run another check in the future using an exponential backoff for the timeout.
2019-03-24If we can't check the resolver its state is UNKNOWN.Florian Obser
2019-03-24remove useless debug outputFlorian Obser
2019-03-22Revert parts of recent changes to pretty_print_domain_search(). PartsKenneth R Westerback
of WIP escaped into the wild and broke parsing of domain-search. Reported by Greg Steuck and Raf Czlonka. Fix tested by Greg.
2019-03-22No need to log that the DHCP lease file doesn't exist.Jeremie Courreges-Anglas
We still want to log other causes when failing to open the lease file, but then do so with a more helpful error message. ok florian@
2019-03-21punctuation needs to be preceeded by a space, in Scots;Jason McIntyre
2019-03-21Clarify verbiage. If we could just write it in Scots thenKenneth R Westerback
it would be so much easier.
2019-03-21Simplify merge_option_data() with strpbrk().Kenneth R Westerback
Zap insidious trailing space.
2019-03-20Do not accept dhclient.conf(5) "prepend" or "append" statements whenKenneth R Westerback
the option data cannot be prepended or appended to. Instead, treat "prepend" as "supersede" and "append" as "default". This preserves the safe aspects of current behaviour. Issue a parsing warning when appropriate to encourage people to fix their configuration files. Eliminate egregious repeated code by abstracting merge_option_data().
2019-03-19Parsing error messages display only the first 80 characters of theKenneth R Westerback
offending line. It is fruitless to try to position the "^" at a character more than 80 characters from the start of the line.
2019-03-19delay dropping privs a bit when root so that setrtable works.Ted Unangst
traceroute bits from benno. ok benno claudio
2019-03-19Nuke a couple of XXX comments.Kenneth R Westerback
2019-03-18Use same idiom for pretty_print_domain_search() andKenneth R Westerback
pretty_print_classless_routes(), making both of them local to options.c. Avoids a double pretty print of DHO_DOMAIN_SEARCH, eliminates an unneeded 1024 byte static array. Shrinks size of upcoming diff to implement parsing of domain search option in leases and dhclient.conf.
2019-03-18Add a couple of checks to ensure option data fits into the proposalKenneth R Westerback
field being memcpy()'d into. Tweak DHO_ROUTERS handling to be similar to the other cases populating proposal->rtstatic, including a warning when things go wrong.
2019-03-18explicitly use BPF_FILDROP_CAPTURE when configuring BIOCSFILDROPDavid Gwynne
BIOCSFILDROP used to just be a flag, ie, any non-zero value was treated the same, but i'm changing it so different values do different things. this way the programs should keep working even if i decide to change the values for these macros.
2019-03-15Correctly interlock config reloads imsgs.Florian Obser
Only accept a new config reload if it's not currently running and on accept a config reload end if one is currently running. OK pamela
2019-03-15Do not accept a control socket if we already have one.Florian Obser
OK pamela
2019-03-11Make slaacd(8) imsg processing more paranoid. Unexpected size mismatchespamela
mean we should no longer trust processes, so we call fatal(x). The control socket is the exception, where we ignore rather than allow crashes due to data from the outside. suggestion/input and OK florian@
2019-03-11sort the mpls options; ok dlgJason McIntyre
2019-03-11tweak previous;Jason McIntyre
2019-03-11Change fatal() to fatalx() where errno is not set.pamela
input and OK florian@
2019-03-11While strtonum(3) does set errno, we already use errstr to show what'sFlorian Obser
going on so use log_warnx to not print a useless 2nd error message. OK pamela
2019-03-11fix the documentation for mpls interfacesDavid Gwynne
instead of an mpe and mpw section, have an MPLS section that talks about mpe, mpw, and mpip.
2019-03-11remove an extra ; on a lineDavid Gwynne
no functional change
2019-03-10delete whitespace before a full stop on a text line;Ingo Schwarze
patch from Alessandro dot Gallo at syssegv dot org
2019-03-07update the error message for the interactive 'n' command to show thatJason McIntyre
-F or -f is required; ok krw
2019-03-07use colons before showing examples; while here, replace the \*( char sequences;Jason McIntyre
2019-03-07Remove pfctl_*_pool() remnantskn
Left behind in pfctl_parser.h revision 1.91 "First pass at removing the 'pf_pool' mechanism [...]" These functions don't exist anymore, no object change. OK procter
2019-03-06Fix once ruleskn
parse.y revision 1.682 from 16.07.2018 errornously allowed `match once' and `anchor "a" once'. Fix both by checking for PF_DROP not PF_MATCH and creating anchors in the parser already such that they can be used to distinguish anchor rules in the same check as well. Found and fixed by Petr Hoffmann <petr.hoffmann at oracle dot com>, thanks! While here, remove an unneeded cast and make pfctl_add_rule() void as it always returned 0. OK sashan
2019-03-05slaacd doesn't have a config file to reload on hangup. We can ignorepamela
those signals, so remove unnecessary signal handling code. pointed at and OK florian@
2019-03-04According to RFC 7230 Section 3.2 header field names areFlorian Obser
case-insensitive. Pointed out by "Wolf" ( wolf at wolfsden.cz ) for acme-client, thanks!
2019-03-02Unfortunately we cannot use unveil in the main process since thisFlorian Obser
breaks config reload. We cannot simply unveil the config file since it might appear after startup and the config file syntax allows to include other files. This is a problem with all the other parse.y based privsep'ed daemons as well. pledge("rpath") has to be enough for now.
2019-03-02Introduce the IMSG_DATA_SIZE() macro to replace recurring math onpamela
imsg.hdr.len to shorten and simplify code. correction and OK florian@
2019-03-01trailing whitespaceFlorian Obser
2019-03-01Due to the way we build libunbound inside of unwind .o files collide inFlorian Obser
the obj directory. Previously this was solved by keeping the libunbound file name (to be able to keep in sync with upstream) and prefixing the source filename of colliding .o files in unwind with uw_. However, these files are shared through out our tree (namely parse.y, log.c and log.h) and we try to keep them in sync. Move files back to their original name and instead symlink colliding source files in libunbound to unique filenames by prefixing them with the directory they live in: obj/sldns_parse.c -> /usr/src/sbin/unwind/libunbound/sldns/parse.c obj/util_log.c -> /usr/src/sbin/unwind/libunbound/util/log.c Idea to use symlinks deraadt@ via jsg@ OK benno
2019-02-27update RFC references, from tobias_heider at genua.de, ok claudio@Stuart Henderson
2019-02-26add domain-search to the list of options capable of adding to resolv.conf;Jason McIntyre
confirmed by and ok krw
2019-02-26Fix sending IKEV2_CFG_INTERNAL_IP6_DNS, IKEV2_CFG_INTERNAL_IP6_NBNS,Patrick Wildt
IKEV2_CFG_INTERNAL_IP6_DHCP and IKEV2_CFG_INTERNAL_IP6_SERVER by using the correct member in the iked_addr struct for the address. From Aram Havarnean
2019-02-26get rid of the mpw goopDavid Gwynne
this reduces the output that mpw interfaces generate from 3 lines to the one generic mpls and pwe3 line. mpw can be configured with the individual ioctls, and gains the ability to do flow aware transport.
2019-02-26implement support for pwe3 ioctlsDavid Gwynne
this allows individual configuration of the use of control words, flow aware tranport labels, and the local and remote label plus neighbor individually. discussed with claudio@ at a2k19 ok mpi@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-12 22:20:24 +0000