summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2008-07-18merge host_v6 with relayd's version to use getaddrinfo instead ofReyk Floeter
inet_pton. host_v4, host_v6, and host_dns could be merged into one function using getaddrinfo but i keep it in multiple functions to keep it in sync with the other daemons using this common code.
2008-07-18merge log_host with relayd's version using getnameinfo and rename itReyk Floeter
to print_host.
2008-07-18terminate the input buffer on failure in print_host()Reyk Floeter
2008-07-17final reorder diff to use TAILQ_INSERT_TAIL instead ofReyk Floeter
TAILQ_INSERT_HEAD. now tables and relays are also matching the order in the config file. ok pyr@
2008-07-17add the hosts in order to get host ids that match the order in the config ↵Reyk Floeter
file. ok pyr@
2008-07-17give sane ids to hosts, tables, redirections, relays, etc. - startReyk Floeter
counting at 1 and do not assign an id before inheriting a real table. makes more sense in the relayctl output. ok pyr@
2008-07-17use getaddrinfo/getnameinfo to parse ipv6 addresses instead ofReyk Floeter
inet_pton/inet_ntop to allow specifing and printing the IPv6 scope identifier. synced host_v6() with ntpd's version to use getaddrinfo() instead of inet_pton() - host_v4, host_v6, and host_dns could all use getaddrinfo in a single function by specifing different flags but this would diverge from the other daemons using this common interface so we keep this little overhead. discussed with henning@ ok pyr@
2008-07-16relay_connect() may fail, close the session in the bindany callbackReyk Floeter
if it does.
2008-07-16use getsockname() to find out the local address of a connection beforeReyk Floeter
doing a nat lookup. this fixes nat lookups when the relay is listening to a wildcard IPv4/IPv6 address (like 0.0.0.0 or ::).
2008-07-16fix nat lookup to use the correct pf_addr offset. now it also worksReyk Floeter
with ipv6.
2008-07-16Dynamically allocate fd_sets so we are not limited to FD_SETSIZETodd C. Miller
connections. With help from djm@. OK djm@
2008-07-11httpd deamon -> httpd daemonMartynas Venckus
2008-07-11add missing ssl art after manual has been moved, instead of usingMartynas Venckus
src of non-existent place; ok pval@, okan@, "looks good" jdixon@
2008-07-10Fix "etc source" output when not using a tarballAntoine Jacoutot
ok "bien sur!" sthen@
2008-07-10retry port allocation on all errors, not just EADDRINUSE; ok jakob@Damien Miller
2008-07-09let the kernel choose the random port. code from djm@. ok markus@.Jakob Schlyter
2008-07-09missing new-line character.Igor Sobrado
2008-07-09an ellipsis is not an optional argument.Igor Sobrado
2008-07-09documentation tweaks.Igor Sobrado
2008-07-09reintroduce our own shuffle ID generator. ok djm@ millert@Jakob Schlyter
2008-07-09merge and resolve conflicts introduced by 9.4.2-P1Jakob Schlyter
2008-07-09always verify that the received dns response id matches our request.Reyk Floeter
2008-07-09Use OpenBSD's knuth shuffle algorithm of random values from bind toReyk Floeter
produce the DNS request ids instead of a simple per-request arc4random(). This ensure randomness but also satisfies the non-repeating property we need. ok deraadt@
2008-07-09remove an unused variable that is a leftover from the old alg.Reyk Floeter
ok deraadt@
2008-07-09also set the protocol, either TCP or UDP, in the NAT lookup. thisReyk Floeter
unbreaks NAT lookups with UDP; tested as a transparent DNS relay.
2008-07-09only use SOCK_STREAM for TCP in bindany(), otherwise SOCK_DGRAM for UDP.Reyk Floeter
2008-07-09update the relay dns code to open a new udp socket to send theReyk Floeter
forwarded dns request to the server instead of sending from the server socket. this will fix the limitation the the dns relay had to listen to the "0.0.0.0" address, and will also enable relayd to use the udp source port randomization. relayd will know randomize the source port (on OpenBSD) and DNS request identifier for the clients behind it. ok pyr@
2008-07-08Use correct format string specifier for int argument. Don't try to print itClaudio Jeker
as string. Fixes crash seen by Peter Bristow. "obviously ok" henning@
2008-07-08Typo in summarize output.Antoine Jacoutot
ok sthen@
2008-07-04Teach sysmerge to retrieve {etc,xetc}*.tgz files from FTP/HTTPStuart Henderson
paths using ftp(1). Thanks ajacoutot and jmc for suggestions. ok ajacoutot jmc, no objection deraadt
2008-07-04remove trailing whitespace;Jason McIntyre
2008-07-04Make the proxy module work with https again by allowing the destinationMarc Balmer
port to be set in the config file instead of using HTTP_DEFAULT_PORT in all cases. Prevent a segfault that would happen when the SSL connection from the proxy fails. Problem found and analyzed by Mischa Diehm; fix by me.
2008-07-04clean up parser a bit, separating local/distant parts in a more reusable way,Marc Espie
and simplify file: parsing scheme (trying it with file:, then without is a bit stupid once we have the pieces to put it back together directly). Drop the restriction on urls from the man page, no need to finish stuff with /.
2008-07-04some small text improvements; ok ajacoutotJason McIntyre
2008-07-03deal with hrefs containing '/' instead of just the package file nameNikolay Sturm
this permits fetching packages from thttpd ok espie
2008-07-02kill a bunch of dead code.Pierre-Yves Ritschard
2008-07-02Prevent dvmrpd from using illegal ifindex's.Esben Norby
Report and fix from Matthew Dempsky.
2008-06-29repetition, spotted by <bsd@openbsd.rutgers.edu>Pierre-Yves Ritschard
2008-06-29Use C99, not gcc-specific variadics. Ok miod@.Anders Magnusson
2008-06-29various macro/spelling/grammar fixes;Jason McIntyre
2008-06-29typoMiod Vallat
2008-06-29document the configuration directives for directories.Pierre-Yves Ritschard
2008-06-28add an underscore to argument name.Igor Sobrado
2008-06-27synch with rest of workMarc Espie
2008-06-27More removal of clauses 3 and 4 from NetBSD licenses.Ray Lai
OK deraadt@ and millert@
2008-06-26tweak;Jason McIntyre
2008-06-26seperate out the openldap stuff that will be replacedTheo de Raadt
2008-06-26must be able to get at include fileTheo de Raadt
2008-06-26cleanup include file. remove unneeded socket cleanup.Pierre-Yves Ritschard
2008-06-26ypldap -- Intended to be a drop-in replacement for ypserv, gluing in aPierre-Yves Ritschard
LDAP directory and thus providing support for users and groups stored in LDAP for the get{pw,gr}ent family of functions. As of now it relies on external LDAP libraries, choose the one of your liking though openldap would do fine. Not linked to the builds until some things are sorted out, having our own LDAP client code for instance, better support for group membership lookup as well. Remember to sync with the latest master.passwd and group files as well to have the _ypldap user available, which is needed. ``just get it in'' deraadt@