summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2018-09-08missing Ed;Jason McIntyre
2018-09-08implement or-longer filter op for prefix-sets. Allows one two write rules likeSebastian Benoit
deny from any prefix-set mynetworks or-longer ok claudio, feature discussed with job and deraadt
2018-09-08Check for malloc() failures.anton
Initial diff from Clemens Goessnitzer on tech@ Feedback and ok tb@
2018-09-08More BGPD_OPT_NOACTION checking to make regress happier.Claudio Jeker
2018-09-08If BGPD_OPT_NOACTION is set don't check that the rdomain exists.Claudio Jeker
This makes it possible to use bgpd -nv in regress with unknown rdomains.
2018-09-08use symbolic integer values for the different tls options when relaying,Eric Faurot
rather than a confusing set of flags. ok gilles@
2018-09-08Change the way we parse prefix-sets so that newlines are allowed in moreClaudio Jeker
places and so prefix-sets look a lot better. Currently commas are not allowed but they will come back soon. OK benno@
2018-09-08Fix print_as_sets() a bit.Claudio Jeker
OK benno@
2018-09-07Make host_*() AF-agnostickn
Merge host_v{4,6}() into much simpler host_ip() using just getaddrinfo(). host_dns() uses the same procedure. OK naddy
2018-09-07The debug function trie_dump() should use stderr since that does not caseClaudio Jeker
that much problem with the regress test which writes its stuff on stdout.
2018-09-07fix badly broken reload of filter rules that use prefix-sets. debuggedSebastian Benoit
and fixed with/by claudio@
2018-09-07Add missing htonl() else matching does not really work.Claudio Jeker
2018-09-07Document the spin CPU state columnsolene
ok yasuoka@ jca@
2018-09-07remove unused function find_prefixsetitem(), ok claudio@Sebastian Benoit
2018-09-07Some space fixes mentioned by benno@Claudio Jeker
2018-09-07Implement a fast presix-set lookup. This magic trie is able to match aClaudio Jeker
prefix addr/plen to a prefix-set spec addr/plen prefixlen min - max (a prefix including prefixlen range). Every addr/plen pair is a node in the trie and the prefixlen is added as a bitmask to those nodes. For the lookup the any match is OK, there is no need to do longest or best prefix matching. Inspiration for this solution comes from the way bird implements this which was done by Ondrej Zajicek santiago (at) crfreenet.org OK benno@
2018-09-07allow as4number_any in as-sets. Otherwise you cant filter bogon as'es.Sebastian Benoit
ok claudio@
2018-09-07Do not send a Content-Length header for 1xx and 204 status codes sinceFlorian Obser
RFC 7230 states that a server MUST NOT do so. At least relayd chokes on this. Pointed out & diff by Carlin Bingham (cb AT walcyrge.org), thanks! OK benno
2018-09-07Fix the build after removing an unused af argument from unmask().Kevin Lo
ok claudio@
2018-09-07replace malloc()+strlcpy() with strndup() in cmdline_symset().miko
"looks good" gilles@ halex@
2018-09-07Fix "_nfiles" reference for crash dump.YASUOKA Masahiko
Diff from fukaumi at soum.co.jp ok mpi
2018-09-07tweak previous;Jason McIntyre
2018-09-07When parsing AS numbers set both as_min and as_max to the parsed value.Claudio Jeker
Not strictly needed but better to have both initialized.
2018-09-07Add a dummy as_set_match() function since it is needed to link util.c now.Claudio Jeker
2018-09-07Implement as-set a fast lookup table to be used instead of long list ofClaudio Jeker
AS numbers in source-as, AS and transit-as filterstatements. These table use bsearch to quickly verify if an AS is in the set or not. The filter syntax is not fully set in stone yet. OK denis@ benno@ and previously OK deraadt@
2018-09-06Use getline() for the network bulk code. Also make the parser better byClaudio Jeker
doing tokenizing on spaces and correctly ignore comments. This should make this feature in general more robust. OK benno@
2018-09-05synchronize resolver code with smtpdEric Faurot
2018-09-05Implement most prefixlen operations as OP_RANGE (prefixlen A - B).Claudio Jeker
Simplify the RDE logic this way and make it possible to load such ranges into a much faster lookup trie for prefix-sets. When printing the config bgpd tries to use the nices way to express the rule: e.g. match from any prefix 18.0.0.0/8 prefixlen 8 - 32 becomes match from any prefix 18.0.0.0/8 or-longer Apart from that there is no user visible change because of this. OK sthen@
2018-04-27Import lpd, a re-implementation of the lpr daemon following the latestEric Faurot
OpenBSD coding practices (fork+exec/privsep/pledge/...). It is only intended to replace the lpd(8) daemon for the moment, not the lpr(1), lprm(1), lpq(1) and lpc(8) commands. This is a work in progress. The server part should be fairly functionnal, but the printer part is not complete: remote printers should work, for local printers it depends on the setup. Anyway, at this point it's better in the tree than rotting on my disk. ok deraadt@
2018-09-05rename flagEric Faurot
ok gilles@
2018-09-05Adjust after change of struct filter_as.Claudio Jeker
OK phessler@
2018-09-05Change the way as_compare() and aspath_match() handle 'neighbor-as'. InsteadClaudio Jeker
of doing the condition before calling aspath_match() just pass the neighbor-as down to as_compare() which then has all needed data for the lookup. While doing this also remove one of the as fields in struct filter_as since the min/max fields can be reused for unary operations. OK denis@ phessler@
2018-09-05Add "op" column for CP_SPIN. Diff from fukaumi at soum.co.jpYASUOKA Masahiko
ok solene
2018-09-05rename token to match naming conventionGilles Chehade
ok eric@
2018-09-05Change verification of communities a bit. Move the flag checking first sinceClaudio Jeker
it is currently terminal and then do the length check. If that one triggers do a treat-as-withdraw but at the same time drop the bad attribute since it is better to not have invalid attributes in the Adj-RIB-In since most code does not expect that. OK benno@
2018-09-05some text improvements from matt schwartz; ok gillesJason McIntyre
2018-09-05do not use the literal string "label" as our example label; ok gillesJason McIntyre
2018-09-05rework the text about "label" somewhat for clarity; ok ericJason McIntyre
2018-09-04remove useless session flagEric Faurot
ok gilles@
2018-09-04move readmes detection to find_extractible, so that only changed/new readmesMarc Espie
are recorded. Be more specific and list those readmes in alphabetic order at end.
2018-09-04upon mda failure, smtpd would assume tempfail and retry. this is at oddsGilles Chehade
with the other MTA which assume a permfail unless the exit status is one of a specific set. make smtpd honour the same exit statuses as postfix. note that all errors that occur before the user mda is executed (fork, pipe and related) are still considered tempfail, only errors coming from the mda itself are handled as permfail. this commit is a temporary solution as i believe the SIGCHLD handler is way more complex than it should be and we'll simplify it after 6.4 is out. ok eric@
2018-09-04Introduce inet4applymask() which does the same as inet6applymask() andClaudio Jeker
can be used instead of doing direct fiddling around with struct in_addr. Use it in a few cases where it makes the code more similar between INET and INET6 case. OK denis@
2018-09-04Instead of bzero() use an assinment to zero struct in_addr.Claudio Jeker
2018-09-04remove unused flagsEric Faurot
2018-09-03simplify the smtp_command() function by splitting cmd handlers intoGilles Chehade
two sets of functions smtp_check_<verb> and smtp_proceed_<verb>. we use the check functions to validate that verb is acceptable at this point of a session and proceed to actually move the session forward ok eric@
2018-09-03bump max line sizeGilles Chehade
ok eric@
2018-09-03document "wrapper" in the local section; from matt schwartzJason McIntyre
ok gilles while here, fix some spelling at eol whitespace introduced in previous;
2018-09-03use new smarthost syntax in log messageEric Faurot
2018-09-03Update and document syntax for smarthost string in smtpd.conf:Eric Faurot
- the +auth specifier is removed: it is implied by the presence of an auth label in the rest of the string - secure:// is removed: use smtp+tls:// or smtps:// - tls:// is replaced by smtp+tls:// - smtp:// becomes SMTP with opportunistic STARTTLS - smtp+tls:// becomes SMTP with mandatory STARTTLS Adjust your config file accordingly. ok gilles@
2018-09-02mailaddr matching was working for the exact and domain match, but not whenGilles Chehade
only a user-part was supplied. ok millert@ and eric@
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-16 19:01:12 +0000