summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2014-04-05fix writing of multiline To and Cc headersGilles Chehade
issue spotted, fix tested and okayed krw@
2014-04-04fix header parsing issue in enqueuer leading to From: header being strippedGilles Chehade
in some cases ok eric@
2014-04-04Merge the mda, mta and smtp processes into a single unprivilegedEric Faurot
process managing message reception, delivery and transfer. Mostly mechanical, but very intrusive as it required to rewamp all IMSG to fix ambiguities. with and ok gilles@
2014-04-04start the purge task after events are set, or we can miss SIGCHLDEric Faurot
ok gilles@
2014-04-04remove some duplicate text,Ingo Schwarze
and some remains of the template not pertinent to section 8; ok yasuoka@ jmc@
2014-04-03various macro cleanup and tweaks;Jason McIntyre
ok yasuoka schwarze
2014-04-03use asr helpers after libevent update.Eric Faurot
2014-04-03add mention about "monitor" command.YASUOKA Masahiko
2014-04-03calucuation of response message size was wrong.YASUOKA Masahiko
2014-04-02use setresgid()Theo de Raadt
ok guenther millert
2014-04-01Remove -ggdb -g3, this shouldn't be hereFederico G. Schwindt
Requested by deraadt@
2014-04-01cleanup forkmda() and get rid of a useless seteuid()-based danceGilles Chehade
prompted by deraadt@, ok eric@
2014-03-29bugfix and security update to 1.4.7:Robert Nagy
CVE-2014-0133 does not affect OpenBSD because SPDY is not enabled ok florian@
2014-03-29use deltaT to calculate time intervalls; reduces diff to traceroute6Florian Obser
OK benno@, lteo@
2014-03-29use iovec in wait_for_reply; reduces diff to traceroute6Florian Obser
OK benno@
2014-03-27one more Xr to smtpd;Jason McIntyre
2014-03-27switch smtpd and sendmail examples now that smtpd is the defaultGilles Chehade
ok jmc@ tedu@
2014-03-27adjust commented-out sample blocks for PHP and SSL configurations:Stuart Henderson
- add a small shared SSL session cache - disable rc4 ciphers in sample config - switch to a unix socket for php-fpm - use try_files to avoid passing non-existing files to php http://wiki.nginx.org/Pitfalls#Passing_Uncontrolled_Requests_to_PHP ok robert@
2014-03-27zap dead code; OK lteo@Florian Obser
2014-03-27restore_sum: remove newly created sum file(s).Antoine Jacoutot
2014-03-26login.conf(5) is not special anymore.Antoine Jacoutot
2014-03-26Remove bsd-wrapper pieces to handle pulling unbound-host.1 from src,Stuart Henderson
no longer needed now that this file is handled the same in Unbound's build infrastructure as the other manpages.
2014-03-26Handle unbound-host(1) the same way as other manpages and have configureStuart Henderson
generate a copy in the build directory. Removes some complexity and fixes a problem noticed by rpe@ when running 'make -f Makefile.bsd-wrapper clean' in src dir without having an obj dir present. From upstream r3100.
2014-03-26Print correct filename if config errors exist in an "include"d file.Stuart Henderson
From upstream r3099
2014-03-26asr API is now publicEric Faurot
2012-03-26Import Unbound 1.4.16 to work on in-tree (not yet linked to the build).Stuart Henderson
These are the direct sources from NLnet Labs upstream, minus these: compat contrib libunbound/python pythonmod testcode testdata winrc ok deraadt@ jakob@
2014-03-25update after asr API updateEric Faurot
2014-03-25reword error message when a table has an invalid configuration file, it hasGilles Chehade
confused a few people ok eric@
2014-03-25when locally enqueuing messages without specifying a domain for sender orGilles Chehade
recipient, the local domain is assumed. this was correctly handled at the smtp level, but headers were not updated to reflect that. issue experienced by several people, fix tested by ajacoutot@ and I ok eric@
2014-03-25Integrate necessary dns packet parsing helpers from asr.Eric Faurot
They are not supposed to be exposed. ok gilles@
2014-03-24Rework the way we fetch and verify sets to simplify the process.Antoine Jacoutot
Don't fetch SHA256 twice when we are updating from the same repo. Better output. Simplify extract_set (becomes extract_sets and deal with all sets at once). Make sure we cannot pass -s xetcXX and/or -x etcXX. Bring consistency in condition evaluations. Drop some unused variables. with inputs from rpe@
2014-03-24do not call purge_task every 10 secs, it is only needed once at startup andGilles Chehade
will cause the parent process to wake up unnecessarily at runtime ok eric@
2014-03-24don't proceed in case of permission errorsMarc Espie
2014-03-24Remove "-r" option from ping(8) and traceroute{,6}(8). You've probablyMartin Pieuchot
never heard about it, it was to bypass the routing tables, not available for IPv6 and we're going to always use the routing tables soon. ok florian@, man pages ok jmc@
2014-03-24Passing MSG_DONTROUTE to sendto() here has no effect since SO_DONTROUTEMartin Pieuchot
is only implemented for IPv4. Just remove it. Tested by and ok florian@
2014-03-24Remove commented out MSG_DONTROUTE flag. No object change.Martin Pieuchot
ok florian@
2014-03-22Fix trap: do not remove the entire WRKDIR -- we may have our backed up filesAntoine Jacoutot
in there.
2014-03-22Also remove TEMPROOT in error_rm_wrkdir.Antoine Jacoutot
2014-03-22Make sure to add missing users/groups _before_ running theAntoine Jacoutot
distribution-etc-root-var target; otherwise mtree(8) can fail. issue reported and debugged by deraadt@ ok sthen@
2014-03-22disable the imsg buffers profiling code unless requested, this will preventGilles Chehade
all processes from waking up every second
2014-03-22Now tunnel can have multiple listen addresses.YASUOKA Masahiko
2014-03-22Reimplement control part of npppd(8) with imsg. Also add "monitor"YASUOKA Masahiko
command for npppctl(8) to monitor PPP session start/stop events.
2014-03-22Add an assert not to call radius_cancel_request() on callback. If theYASUOKA Masahiko
assert is disabled by compile time, the function returns immediatly on that condition.
2014-03-22Fixed a bug in npppd_auth_get_user() which caused segmentation faults afterYASUOKA Masahiko
a user authentication is succeeded in case the authentication config option has `username-suffix' and 'strip-atmark-realm' is yes. Delete `username-prefix' from authentication setting. This config option was mis-leading and useless.
2014-03-22In RADIUS accounting, realm_framed_ip_address was mistakenly used forYASUOKA Masahiko
Framed-IP-Address. acct_framed_ip_address should be used for that purpose.
2014-03-22Don't stop listening 1723/tcp when accept() is failed.YASUOKA Masahiko
2014-03-22Stop output "Stopped" log message of the tunnel protocols.YASUOKA Masahiko
2014-03-21Disable MS-CHAPv1 (RFC 2433) support. Undocumented; Microsoft droppedChristian Weisgerber
support in 2007 (Windows Vista); requires MD4, which will be removed. ok sthen@
2014-03-21Use ftp -D.Antoine Jacoutot
2014-03-21Fix small regression when not using a full path to sets.Antoine Jacoutot