summaryrefslogtreecommitdiff
path: root/usr.sbin/rebound
AgeCommit message (Expand)Author
2015-10-29put timeout nullification in correct spotTed Unangst
2015-10-29be a little more precise about checking filtersTed Unangst
2015-10-29refold a few linesTed Unangst
2015-10-29collect some cool stats and print them out with SIGUSR1Ted Unangst
2015-10-28impose some limit on the cache size as well.Ted Unangst
2015-10-28if accept() fails due to fd exhaustion, stop accepting for one second.Ted Unangst
2015-10-28bug in the request tree code: requests were being added to the tree beforeTed Unangst
2015-10-28twiddle with rlimit to give us a few more files. use rlimit as a hint asTed Unangst
2015-10-28add pledge to main process, though it needs a few more optionsTed Unangst
2015-10-28use an rb tree for the cache too. modelled after the reqtree.Ted Unangst
2015-10-28use an rb tree for finding requests. from Dimitris PapastamosTed Unangst
2015-10-26one second amnesty for timeouts so we don't spin with short timeoutsTed Unangst
2015-10-26set listening sockets to nonblocking, then handle as many incoming requestsTed Unangst
2015-10-17don't need fcntl for non blocking socket, just ask for it upfrontTed Unangst
2015-10-16save some file descriptors. instead of a pipe, use kevent to watch parentTed Unangst
2015-10-16naddy would like the child to exit when the parent dies.Ted Unangst
2015-10-16life is simpler if all requests go in the fifo, and then just remove themTed Unangst
2015-10-16deraadt tells me i'm supposed to check if connect() actually worked.Ted Unangst
2015-10-16two phase handling for tcp so that slow connects don't stall the processTed Unangst
2015-10-16save request length in cache. naddy noticed we weren't getting any hits.Ted Unangst
2015-10-16fine tune the logging some moreTed Unangst
2015-10-16simplify logging functions. once a daemon, always a daemonTed Unangst
2015-10-16safety check that we're dealing with the filter we expectTed Unangst
2015-10-16most things should be staticTed Unangst
2015-10-16exit(1) is better for the impossible conditionTed Unangst
2015-10-15it is perhaps better style to not call close() on -1, even if harmlessTed Unangst
2015-10-15make sure req is zeroed in tcp caseTed Unangst
2015-10-15better memory handling of the request/cache chainTed Unangst
2015-10-15do not insert entry into cache until it's fully formedTed Unangst
2015-10-15doh, not all requests are the same size. check len first.Ted Unangst
2015-10-15assert is the wrong toolTed Unangst
2015-10-15the inet sockets don't work well with inet6 addrs. pick family from addr.Ted Unangst
2015-10-15introduce logerr, since most logging is followed by exitTed Unangst
2015-10-15now with _rebound user, we can try a little harder at privdropTed Unangst
2015-10-15make the HUP interlocking in the parent work better.Ted Unangst
2015-10-15trivial KNFTheo de Raadt
2015-10-15just a space in usage, from deraadtTed Unangst
2015-10-15add a hint about the config file, until it changesTed Unangst
2015-10-15child can be pledged down a bit to just sockets and ioTed Unangst
2015-10-15import rebound, a lightweight dns proxy, for further polishingTed Unangst