summaryrefslogtreecommitdiff
path: root/usr.sbin/hoststated
AgeCommit message (Collapse)Author
2007-02-20use HOST_UP instead of an hard coded integerReyk Floeter
2007-02-12spacingPierre-Yves Ritschard
2007-02-09unbreak the symset functionReyk Floeter
2007-02-08carefully check some return values and make lint happier. never passReyk Floeter
any truncated strings (table names/anchors/tags/...) to pf and the kernel. ok pyr@
2007-02-07add new "log (updates|all)" configuration option to log stateReyk Floeter
notifications after completed host checks. either only log the "updates" to new states or log "all" state notifications, even if the state didn't change. the log messages will be reported to syslog or to stderr if the daemon is running in foreground mode. ok claudio@ pyr@
2007-02-07include the host name in log_debug() messages used by check_tcp readReyk Floeter
callbacks.
2007-02-07another log_debug() removal ("nothing to write")Reyk Floeter
2007-02-07more log_debug() cleanupReyk Floeter
2007-02-07remove superfluos log_debug() messagesReyk Floeter
ok pyr@
2007-02-07remove unused functions and variables which have been copied fromReyk Floeter
ospfd(8) (can be re-imported later if required).
2007-02-07add the -D option to define macros on the command line (as found inReyk Floeter
bgpd(8), hostapd(8), ipsecctl(8), pfctl(8), ...).
2007-02-06fix a bug when enabling a service that has no backup table.Pierre-Yves Ritschard
ok reyk@
2007-02-06update some more debug messages and fix typos. also remove some extraReyk Floeter
debug noise from ssl.c.
2007-02-06now that check_http_code, check_http_digest and check_send_expect arePierre-Yves Ritschard
in check_tcp.c, prototype them in check_tcp.c ok reyk@
2007-02-06declare the function ssl_error() globallyReyk Floeter
2007-02-06change fatal message to know where it happenedReyk Floeter
2007-02-06remove an unused variable.Pierre-Yves Ritschard
ok reyk@
2007-02-06inform hoststatectl monitor of ruleset changes and table syncs.Pierre-Yves Ritschard
ok reyk@
2007-02-03merge tcp-based checks into one file, no functional changesReyk Floeter
ok pyr@
2007-02-03remove debug messageReyk Floeter
2007-02-01add a monitor mode to hoststatectl to continuously report changes inPierre-Yves Ritschard
hoststated. ok reyk@, "looks nice and clean" niallo@
2007-01-30this diff changes "-lcrypto -lssl" to "-lssl -lcrypto" to let itReyk Floeter
compile on vax. on some architectures the order of the libraries matters for the linker. ok pyr@
2007-01-30provide more accurate error messages.Pierre-Yves Ritschard
ok reyk@
2007-01-30small memleak plugged and style changes.Pierre-Yves Ritschard
ok reyk@
2007-01-30style changes.Pierre-Yves Ritschard
ok reyk@
2007-01-29manpage tweaks.Pierre-Yves Ritschard
advised by and ok jmc@
2007-01-29Add SSL support to hoststated.Pierre-Yves Ritschard
with help and OK reyk@ with help and advice by claudio@ and Srebrenko Sehic
2007-01-25return 0, not NULL in a function returning int.Niall O'Higgins
ok pyr@
2007-01-24Similar to ospfd and ripd ignore SIGPIPE in all processes to be able to doClaudio Jeker
a nice exit in case one of the processes dies. OK pyr@
2007-01-24Better handling of escaped CR-LF in the configuration file, commentingPierre-Yves Ritschard
them out was previously broken. This is needed for send/expect scripts. ok claudio@
2007-01-23Typo in fatal() message found by dunceor @ gmail dot comClaudio Jeker
2007-01-20when retrying a write, the position was previously not updated.Pierre-Yves Ritschard
ok reyk@
2007-01-12spacingPierre-Yves Ritschard
2007-01-12use an u_int16_t for flags, the u_int8_t was getting too small.Pierre-Yves Ritschard
ok reyk@
2007-01-12eliminate duplicate tcp read/write code.Pierre-Yves Ritschard
ok claudio@, reyk@
2007-01-11spacingPierre-Yves Ritschard
2007-01-11use real async events for checks and improve the non-blocking socketReyk Floeter
usage. also modify the check_icmp code to use non-blocking raw sockets and merge the icmp4 and icmp6 functions. some other minor changes while i'm here. as discussed with pyr@ claudio@ deraadt@ ok pyr@
2007-01-10tweaks;Jason McIntyre
2007-01-09typoReyk Floeter
2007-01-09Finish renaming hostated to hoststated.Pierre-Yves Ritschard
Note to testers: the user the daemon changes its id to is now _hoststated, don't forget to update master.passwd. ok reyk@
2007-01-09use the correct buffer sizes.Reyk Floeter
(this code needs some more work to implement a better icmp handling, but this will fix a serious bug for now)
2007-01-09unbreakReyk Floeter
2007-01-09adapt to renameTheo de Raadt
2007-01-08do NOT use the regexp interface. it is way to complicated, error-proneReyk Floeter
and we don't know about all the possible security problems. change the check send/expect code to use the fnmatch(3) interface using shell globbing rules instead. this allows simple patterns like "220 * ESMTP*" or "SSH-[12].??-*". suggested by deraadt@ and otto@ ok Pierre-Yves Ritschard (pyr at spootnik dot org)
2007-01-08ports can be specified by number or by nameReyk Floeter
2007-01-08allow to use service names in addition to numerical port numbers inReyk Floeter
the configuration file, eg. "real port http". > From Pierre-Yves Ritschard (pyr at spootnik dot org) ok claudio@
2007-01-08timeouts must not exceed the global intervalReyk Floeter
2007-01-08the timeout values are not allowed to exceed the global interval (iReyk Floeter
figured this out while testing hostated against a stottering spamd where the send/expect timeout needs be > 10 seconds). also use another struct timeval to store the interval for easier handling in the code. ok Pierre-Yves Ritschard (pyr at spootnik dot org)
2007-01-08the timeout values are not allowed to exceed the global interval (iReyk Floeter
figured this out while testing hostated against a stottering spamd where the send/expect timeout needs be > 10 seconds). also use another struct timeval to store the interval for easier handling in the code. ok Pierre-Yves Ritschard (pyr at spootnik dot org)
2007-01-08remove unused token.Reyk Floeter