summaryrefslogtreecommitdiff
path: root/sbin
AgeCommit message (Collapse)Author
2004-06-10Work around an uncovered gcc problem on m88k until it receives proper cure.Miod Vallat
2004-06-10rename struct pf_rule_addr member 'not' to 'neg', as 'not' is a reservedDaniel Hartmeier
keyword in C++. ok henning@, cedric@
2004-06-10Mark authenticated messages explicitly. Better check for authentication beforeHans-Joerg Hoexer
deleteing SAs. This fix is needed to solve the problems reported by Thomas Walpuski, previous diff was not sufficient. Pointed out by Thomas. Thanks! ok ho@ niklas@, testing and spellcheck by todd@ msf@
2004-06-09Fix IPv4 name->address translation. Addresses like "10.1000" will not beCedric Berger
accepted anymore, but constructs like "route add 10.1.2/24 <gw>" will finally do the right thing. ok millert@
2004-06-09Style nits. hshoexer@ okHakan Olsson
2004-06-09only accept DELETEs during an authenticated INFORMATIONAL exchange.Hans-Joerg Hoexer
Fix for recent problem disclosed by Thomas Walpuski. ok ho@
2004-06-09correct mistake in usage(). Chris PinnockJun-ichiro itojun Hagino
2004-06-06- wordingJason McIntyre
- simplify some displays
2004-06-06add new "-src" and "-srcmask" modifiers to make it possible to add a sourceCedric Berger
selector part to the routing table entry. complements existing "-dst" and "-dstmask". typical use: route add -src 20.20.20.22 20.20.20.21 route add -src 192.168.1.0/24 -dst 192.168.2.0/24 20.20.20.21 useful for example to implement symetrical routing on multihomed boxes, or to better select which packets to send to gif/tun/... tunnels. new '-S' flag similar to netstat one. ok deraadt@ mcbride@
2004-06-06Style (KNF, 80c). No binary change.Hakan Olsson
2004-06-0664bit int fixesTed Unangst
2004-06-03fall back to "nobody" when the _dhcp user is not available, theo bob okHenning Brauer
2004-06-02remove unused BIO-functions.Hans-Joerg Hoexer
ok markus@ ho@
2004-05-30interface description, tweaked by deraadt and jcs;Jason McIntyre
2004-05-30various improvements and fixes from jared yanovich;Jason McIntyre
2004-05-29introduce SIOCSIFDESCR and SIOCGIFDESCR to maintain interfacejoshua stein
descriptions, configurable with ifconfig help from various, ok deraadt@
2004-05-29Changes from Andrey Matveev:Todd C. Miller
o only include socket.h once o use errx() not err() where appropriate o close the socket we opened o bzero struct ifreq before use
2004-05-29memory leak; andrushock@korovino.netTheo de Raadt
2004-05-27plug memleak in error pathHenning Brauer
From: Andrey Matveev <andrushock@korovino.net>
2004-05-27Rule parser improvements: line numbers, no nl at eof, handling of linesOtto Moerbeek
with too many tokens. Based on diff from Jared Yanovich. ok tdeval@ deraadt@
2004-05-26do not leak fd on error path.Hans-Joerg Hoexer
ok ho@
2004-05-24Use correct function names in log messages. Kill some spaces.Hans-Joerg Hoexer
ok deraadt@ ho@
2004-05-23use strtonum instead of atoi; dhartmei okTheo de Raadt
2004-05-23More KNF. Mainly spaces and line-wraps, no binary change.Hans-Joerg Hoexer
ok ho@
2004-05-23remove excessive monitor_ prefixesTheo de Raadt
2004-05-23stat before open is flawedTheo de Raadt
2004-05-23greater care with argumentsTheo de Raadt
2004-05-23support deletion of tcpmd5 SAs and add regress tests; ok hshoexer, deraadtMarkus Friedl
2004-05-23unbreak ipcomp; report davidkrause; ok hshoexer@Markus Friedl
2004-05-23do not free before going to exit path; andrushock@korovino.netTheo de Raadt
2004-05-21Use '/' instead of ':' as separator for anchor path components. Note thatDaniel Hartmeier
the parser now needs quotes around paths containing separators. ok mcbride@
2004-05-20Typo from Jared Yanovich phirerunner@comcast.netMarco Peereboom
2004-05-20bzero() ifr before use, From: Andrey Matveev <andrushock@korovino.net>Henning Brauer
2004-05-19Allow recursive anchors (anchors within anchors, up to 64Daniel Hartmeier
levels deep). More work required, but this is already functional. authpf users will need to adjust their anchor calls, but this will change again soon. ok beck@, cedric@, henning@, mcbride@
2004-05-19Permit symbolic protocol and service names, such as "Protocol= tcp", in theHakan Olsson
<IPsec-ID> sections. hshoexer@ ok
2004-05-18Backout changes accidentally committed in prvious commit.Otto Moerbeek
2004-05-18Trailers are really wonders of the past. Remove them from man page andOtto Moerbeek
usage. ok millert@
2004-05-15Fix two byte overflow when printing unknown sockaddrs. OK cedric@Claudio Jeker
2004-05-14unbreak, interpret cpi and spi values as hex even if not preceded by 0x.Jason Ish
2004-05-14Some more KNF, no binary change.Hans-Joerg Hoexer
ok ho@
2004-05-13provide a siginfo handler for -q run; idea from art's todo; millert@ okMichael Shalayeff
2004-05-13fields are unsigned -- printf 'em accordingly; from David Hill <davidh@wmis.net>Michael Shalayeff
2004-05-13don't leave this file open, ok henning@Peter Stromberg
2004-05-13when trying to rewrite the lease file, and if the lease file is alreadyHenning Brauer
opened, do not close and re-open it, which of course fails once we're chrooted and privilege revoked, but rewind the file and truncate later on as needed. makes wilfried@ and Ben Lovett happy (aka, they tested)
2004-05-13Extensions to the FIFO interface:Hakan Olsson
"C get [section]:tag" fetches a configuration value. "C add [section]:tag=value" adds 'value' to a list, typically for the [Phase 2]:Connections tag. FIFO "S" command destination file changed. Various KNF cleanups. hshoexer@ ok.
2004-05-10missing casts spotted by 64 bit ccTheo de Raadt
2004-05-1064bit gcc saw missing castTheo de Raadt
2004-05-10knfTheo de Raadt
2004-05-10remove iso crud, and other misc cleanups; millert okTheo de Raadt
2004-05-10strtonum conversion and better input checking of integer values; ok deraadt@Jason Ish
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-28 08:12:40 +0000