summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2002-05-22strcpy, sprintf death; mpech okTheo de Raadt
2002-05-22remove crudTheo de Raadt
2002-05-20raise RTF_HOST for IPv6 /128 destination. from umeJun-ichiro itojun Hagino
2002-05-19KNFTheo de Raadt
2002-05-19KNFTheo de Raadt
2002-05-19KNFTheo de Raadt
2002-05-19nicer usageTheo de Raadt
2002-05-18Handle long (unsigned 32-bit) IDs in print_uid/gid(). From Oleg Safiullin.Daniel Hartmeier
2002-05-15typo in comment.Artur Grabowski
From Sam Smith S at mSmith.net
2002-05-15Kill commented out stubs for swapoff.Artur Grabowski
2002-05-15kill the reference to swapoff.Artur Grabowski
2002-05-12These small setuid programs allocate a resvport, and then immediately revokeTheo de Raadt
privs. Link them static, so that even less code is run before main does that job.
2002-05-12Explain that user/group 'unknown' can only be used with operators = and !=Daniel Hartmeier
and refuse other constructs in the parser. Also note that 'user >= 0' does not match forwarded packets with unknown user ID.
2002-05-12Add gid based filtering, reduce to one (effective) uid, rename parserDaniel Hartmeier
keywords to 'user' and 'group'.
2002-05-11Add missing libraries to bsd.prog.mk (mostly kerberosV)Marc Espie
Use them in DPADD throughout the tree. Fix a few mispells (LIBMATH -> LIBM...) Wipe obsolete lib (LIBRESOLV) Sort added missing libraries, move obsolete stuff apart. Synch documentation in bsd.README ok deraadt@
2002-05-10Use DLT_LOOP instead of DLT_NULL for pcap, to keep track of changes inHakan Olsson
tcpdump(8). This repairs the '-L' (cleartext packet capture) option.
2002-05-10DLT_NULL -> DLT_LOOPHakan Olsson
2002-05-10Handle host name resolution returning multiple addresses in the ruleDaniel Hartmeier
parser (expand to every address). ok frantzen@
2002-05-09Add a max-mss option to the scrub rule which will enforce a maximum mssjasoni
by lowering it to the given value. - ok dhartmei@, provos@
2002-05-09Introduce user based filtering. Rules can specify ruid and euid (real andDaniel Hartmeier
effective user ID) much like ports. The user of a packet is either the user that opens an outgoing connection, the one that listens on a socket, or 'unknown' if the firewall is not a connection endpoint (for forwarded connections). Socket uid lookup code from jwk@bug.it.
2002-05-08add a newline after pcap error string (as pcap_geterr() doesn't).jasoni
- ok dhartmei@ (a long time ago)
2002-05-06Correct info in "-a maxcontig" section.Todd C. Miller
2002-05-06Use the default calculation of maxcontig, based on fs_bsize and MAXPHYS, soTodd C. Miller
that the cluster summary information is correct for bsize=4k and MAXPHYS=64k. From NetBSD (mycroft)
2002-05-05Instead of returning a useless kernel space pointer for the rule thatDaniel Hartmeier
created the state from DIOCGETSTATE(S), return the integer rule number, Print rule number (if existant) from pfctl -vss. Suggested by Jeff Nathan.
2002-04-30print usage rightTheo de Raadt
2002-04-30use scsictl, not scsictl(8); closes pr/2577.Federico G. Schwindt
2002-04-29wierd -> weirdPeter Valchev
2002-04-26Fix typo--2347 should be 2047; from FreeBSD (moses)Todd C. Miller
2002-04-26use struct in_aliasreq instead of ifaliasreq when setting new inetFederico G. Schwindt
address. solves a sigbus error seen on sparc64 with new binutils. from itojun@
2002-04-26Mention that just because you can store a 104 bit WEP key on the cardTodd C. Miller
doesn't mean the card can actually do 104 bit WEP.
2002-04-25sysctl wants size_t.Marc Espie
2002-04-25no need for __alignment__, it was paste error. from fgs/deraadtJun-ichiro itojun Hagino
2002-04-24Add dynamic (in-kernel) interface name -> address translation. Instead ofDaniel Hartmeier
using just the interface name instead of an address and reloading the rule set whenever the interface changes its address, the interface name can be put in parentheses, and the kernel will keep track of changes and update rules. There is no additional cost for evaluating rules (per packet), the cost occurs when an interface changes address (and the rules are traversed and updated where necessary).
2002-04-23fix grammar in tcpdump exampleMike Frantzen
2002-04-23In mount.h, rename field export -> export_info, to avoid collision with C++.Marc Espie
Synch files that use that field. (This argument is an internal interface specific to OpenBSD, so it won't cause compatibility problems.) (No bump, not an ABI change). ok art, millert...
2002-04-23Allow explicit filtering of fragments when they are not reassembled.Daniel Hartmeier
Document fragment handling in the man page. Short version: if you're scrubbing everything (as is recommended, in general), nothing changes. If you want to deal with fragments manually, read the man page. ok frantzen.
2002-04-23More up to date.Hakan Olsson
2002-04-22Handle configuration lines that end in whitespace or ^M.Hakan Olsson
Also avoid a potential memory leak.
2002-04-21Speak English please.Todd C. Miller
2002-04-20Build pdisk for mac68k as well.Miod Vallat
2002-04-20machine/limits.h is not userland. Use limits.hMarc Espie
ok millert@
2002-04-19Do not depend upon <ansidecl.h> to compile.Miod Vallat
Conforming to espie's evil plans, and ok espie@ tdeval@
2002-04-19Do not commit kbd for arches where it provides no real support.Miod Vallat
While there, remove dead parts.
2002-04-18There is no point in embedding an out-of-date copy of <sys/disklabel.h>,Miod Vallat
especially since this manual page refers to said file. ok deraadt@ millert@
2002-04-18use strlcpyTheo de Raadt
2002-04-17Reset lineno for each file, so pfctl -R ... -N ... reports the rightDaniel Hartmeier
line number for non-first files. Reported by aaron@
2002-04-15Use in_addr_t instead of unsigned long, which breaks on alpha (64-bit).Daniel Hartmeier
Closes PR 2547. Reported by Dries Schellekens. Found by frantzen@.
2002-04-12kbd setting code for the installer. kbd needs to be compiled without KVMTheo de Raadt
support. smat@acm.org, miod, and krw.
2002-04-11o Document the difference between "open system" and "shared key" authTodd C. Miller
o IBSS is now port type 4 o Add an explanation of the various port types
2002-04-11Accept "ibss" for port type 4Todd C. Miller