summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2006-09-20Remove bad144, okay deraadt@ miod@Pedro Martelletto
2006-09-20Make vnd(4) work on read-only file systems, from Paul Stoeber, okay tedu@Pedro Martelletto
2006-09-19enable ESP and AH dissectors over IPv6; ok mpf@ (at k2k6)Christian Weisgerber
2006-09-19make buffer_grow always return a valid struct buf; the contained bufferHenning Brauer
might be NULL on realloc failure tho. all users check buffer size before using the buffer, so this is not a problem. makes error handling much easier. ease the capabilities code big time. claudio ok
2006-09-19when the neighbor announced the restart capability, send the end-of-ribHenning Brauer
marker after a bulk transfer, claudio ok
2006-09-19save the parser state in one big struct, and make it interchangable, akaHenning Brauer
make the parser restartable. with that implement "include" file support. makes life a _lot_ easier with filter generation tools. claudio ok
2006-09-19kill useless debug code that somehow snuck in, some 2 years ago...Henning Brauer
2006-09-17check that stdio file descriptors are actually closed before clobberingDamien Miller
them, following an identical change in openssh
2006-09-17Make rdate ignore ntp responses with ALARM status.Chris Kuethe
"yeah..." henning@
2006-09-16fix error message parsing, okay deraadt@Marc Espie
2006-09-16Only interpret link state routing messages for the monitored carp interface.Marco Pfatschbacher
memcpy the if_msghdr to avoid alignment problems. OK hshoexer@, miod@, deraadt@
2006-09-16sync printing w/ sysctl and also add missing sensor types to the conf ↵Michael Shalayeff
parser; deraadt@ ok
2006-09-12for apps which use interface groups, point to the section ofJason McIntyre
ifconfig(8) where they are explained; ok mcbride mpf henning
2006-09-05security update to BIND 9.3.2-P1. ok miod@ and deraadt@Jakob Schlyter
2006-09-04somehow i managed not to commit the macro changes here...Jason McIntyre
2006-09-01Teach sasyncd to set isakmpd into active or passive mode, accordingMarco Pfatschbacher
to our current carp state. Based on a diff by ho@. OK ho@, hshoexer@, deraadt@
2006-08-31knock out the cpp/,4 stuff here too; from henning (thanks)Jason McIntyre
2006-08-31knock out the cpp/m4 stuff from MACROS; after discussion with many...Jason McIntyre
2006-08-31Add more SADB types to the filter: ACQUIRE, X_ASKPOLICY, REGISTER.Marco Pfatschbacher
While there put the message sieve into the more appropriate filter function. Pointed out by markus. OK ho@, markus@, hshoexer@, deraadt@
2006-08-31Only chroot the unprivileged part of sasyncd(8).Marco Pfatschbacher
OK deraadt@ mcbride@ hshoexer@
2006-08-30need to retry writing to pfkey socket on EAGAIN, ok theoHenning Brauer
2006-08-30writing to the pfkey socket can give EAGAIN and we must retry.Henning Brauer
ok claudio hshoexer deraadt
2006-08-30U[Ss]tar -> ustar, as per posix and our pax docs;Jason McIntyre
from ross l richardson (pr #5216)
2006-08-30document that ftp-proxy cannot function at a raised securelevelCamiel Dobbelaar
ok jmc marco
2006-08-30Remove useless logging, the logged event happens all the time, no need toEsben Norby
spam the logs. ok claudio@ deraadt@
2006-08-29avoid ending mid-sentence w/ `.', or we get an extra space;Jason McIntyre
2006-08-28use Forwarding Information Base vs. Forward Information Base;Kevin Steves
ok jmc@ claudio@
2006-08-28.Xr sysctl 8; wording from jmc@Kevin Steves
2006-08-28tiny grammar fix; ok jmc@Kevin Steves
2006-08-28indicate when the peer announced the Graceful Restart capability, ok claudioHenning Brauer
2006-08-27Change ``etc'' to ``/etc'' for consistency with the rest of th epage.Ray Lai
OK jmc@.
2006-08-27in the restart capability (that we do not actually send yet), set theHenning Brauer
MSB in the first byte, not the LSB to indicate the peer must not wait before sending us updates
2006-08-27fix a small logic botch in session_accept() in the fast reconnect logic,Henning Brauer
to check wether a session was put in IDLE manually by the operator or by bgpd itself as result of a fatal session error we were looking at the wrong timer, claudio ok
2006-08-27add code to announce the restart capability according toHenning Brauer
draft-ietf-idr-restart. Do not announce actual restart capabilities, so that this only serves as indicator that we are capable of sending and receiving the End-of-RIB marker. leave disabled for now, since the code to actually send the EoR-marker is currently ifdef'd out (to be fixed soon) and we wanna play safe for 4.0. and juniper doesn't support that capability (which is not a problem per se) and at the same time has its capability negotiation code completely fucked up, if a capability is rejected they don't indicate WHICH capability they reject (which makes that a problem, tho still a small one and we cope). claudio ok
2006-08-27missing htons() in session_rrefresh()Henning Brauer
no surprise sending route refresh requests didn't work on my i386 routers, i think I originally hacked & tested this on sparc64
2006-08-27change how we advertise capabilities.Henning Brauer
we used to put all capability attributes into one optional attribute. this is legal. I recentlu observed that basically all other implementations use one optional attribute per capability attribute. this difference might explain why we - in some cases - saw "unsupoorted capabiliy" notifications from neighbors without the capability in question in the data part. of course that makes capability negotiation a little hard... so switch us to use one optional attribute per capability as well, and ease the code a bit while there, claudio ok
2006-08-27add buf_grow() to grow an existing buffer (realloc), claudio okHenning Brauer
2006-08-25add PackingOld when replacing, helps people with really old installs...Marc Espie
2006-08-24recognize xauth vendor payloadHans-Joerg Hoexer
ok ho markus
2006-08-240x00000c05 type specifies an Ethernet frame. Print the src MACKevin Steves
with -v or the frame in hex with -vv.
2006-08-23wording;Jason McIntyre
2006-08-23esm(4) also gives status (sometimes ;)Michael Shalayeff
2006-08-23allow monitoring sensors with their own status reporting such as ipmi or ↵Michael Shalayeff
raid controllers; marco@ ok
2006-08-23Add a comment about the empty imsg_event_add() function to make it clearClaudio Jeker
why it is needed.
2006-08-23Extend show rib command. Following new options are added:Claudio Jeker
in: show the unfiltered input of a neighbor aka adj-rib-in out: show only the prefixes that are sent to a specified neighbor (adj-rib-out) neighbor <IP>: limit the output of the command to prefixes sent by the specified neighbor OK henning@ manpage with help by jmc@ but the show rib section needs some rework because it starts to be confusing. Actually the parser needs to get smarter.
2006-08-23Extend show rib interface code so that it is possible to show the adj-rib-inClaudio Jeker
and adj-rib-out. Additionally it is now possible to limit the output to a specified peer. OK henning@
2006-08-22do not send the empty UPDATE message as End-of-RIB marker yet, JuniperHenning Brauer
doesn't handle it correctly. found out the hard way by me :( Note: This is a clear protocol violation by juniper. Nontheless we need to be interoperate correctly...
2006-08-20replace magic numbers, no binary change; prompted by deraadt@Kevin Steves
2006-08-20correct order of include filesTheo de Raadt
2006-08-19make sure updates from sensors have the "synced" flag setHenning Brauer