summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2008-10-04tighter specs (tested for ages locally)Marc Espie
2008-10-04explicitly pad & pack the packetdata structure thrown around on the wire,Theo de Raadt
just like in traceroute6.
2008-10-03Readability changes.Marc Balmer
2008-10-03KNF and readability changes; no binary changes.Marc Balmer
2008-10-03Unify code between the various flavors of imsg buffer.c.Eric Faurot
Use unsigned int for msg_iovlen. ok henning@ claudio@
2008-10-03correct comment; a part of PR4184Theo de Raadt
2008-10-03Use correct function signature when calling the write_host_header hook.Marc Balmer
from Josh Elsasser <josh@elsasser.org>, thanks.
2008-10-02get rid of some unneeded $Id stuffTheo de Raadt
2008-10-02Repair "set reconnect random 0" from PR 5368. This bug report was ignoredTheo de Raadt
since Feb 2007, even though it had a patch. How did this happen??
2008-10-02use calloc() instead of malloc() and bzero()Theo de Raadt
2008-10-02in priv_settime(), we must not adjust the 'next' timestamps on their forHenning Brauer
the offset since we use monotime for these for some time now, and monotime is not affected by system time changes (like, duh, that was the reason for the change). PR5927
2008-10-02correct path for isakmpd/local.pub; from Matthew DempskyJason McIntyre
2008-09-30fix ugly comments.Pierre-Yves Ritschard
2008-09-30add missing copyright.Pierre-Yves Ritschard
2008-09-30aldap library -- Replacement for openldap used in ypldap. aldap is an ↵aschrijver
semi-asynchronous client interface to connect to LDAP servers.
2008-09-29initialize both sides of the lockpipe (only used in debug mode) to -1 toTheo de Raadt
have averted the bug found in pr 5938
2008-09-29do not close a random file descriptor in debug mode, PR 5938 from mickeyTheo de Raadt
2008-09-29add prototype for Carp::croak to prevent error under perl 5.10Simon Bertrang
feedback by espie@, prodded by millert@
2008-09-29fix log option with filter rulesReyk Floeter
2008-09-29also log the label if available for the matching rule node (like theReyk Floeter
URL filter category etc.)
2008-09-29spacingReyk Floeter
2008-09-29Change parsing of comments in external rule files. The hash mark mayReyk Floeter
appear in URLs (eg. /index.html#anchor), so only allow full-line comments indicated by a hash mark # at the beginning of a line.
2008-09-29allow to load expect, filter, log, and remove keys from external filesReyk Floeter
just containing on key per line. this allows easier use of URL white/blacklists from external sources.
2008-09-29Correct the logic when matching prefixes. This solves issues where IPv6Claudio Jeker
prefixes where matched on a simple deny from any prefix 0.0.0.0/0 rule. OK henning@
2008-09-29sort tokens for better readabilityReyk Floeter
2008-09-29allow to listen on a port range for redirections. this fixesReyk Floeter
stickyness with web applications that cannot do the clustering on their own and require stickyness with HTTP to HTTPS migration. this is required in many cases; it is a true fact that we cannot always fix the backend application in the real world. Tested and requested by many
2008-09-29Refactor code that handles the kroute interfaces and make it possible toClaudio Jeker
learn new interfaces during runtime. This should solve the issue with reloads failing when interfaces where created during runtime. OK norby@
2008-09-28ntpd does not require you to run rdate -n before it -- it notices such anTheo de Raadt
event. so don't use the word "before" .. and leave the mention ambigious ok henning
2008-09-26add [-s socket] to usage();Jason McIntyre
2008-09-26allow to add an additional restricted control socket for trap sendingReyk Floeter
only (not even show commands). this allows to place a socket for traps in another daemon's chroot. (based on restricted socket support from bgpd)
2008-09-19Merge printb() fix from ifconfig.c -r 1.157:Marco Pfatschbacher
Don't increment a pointer *before* testing it for NULL. OK canacar@
2008-09-19typoPierre-Yves Ritschard
spotted by uw at o3si dot de
2008-09-18add -A to SYNOPSIS;Jason McIntyre
2008-09-18document -A and include in usageOtto Moerbeek
2008-09-18Add a flag to print amap usage.Artur Grabowski
otto@ ok
2008-09-17- when merging a file, add a key to see a diff between the merged fileAntoine Jacoutot
and the new or old one requested by todd@ months ago "I like the idea" fgsch@, "should be in" todd@
2008-09-15Sync with dhcpd. Do not use < 0 to check for failed syscalls use == -1Claudio Jeker
instead. OK henning@
2008-09-15When checking if a syscall like open(), ioctl() or writev() failed compareClaudio Jeker
directly against -1 and do not use a < 0 test. OK henning@
2008-09-12install the man page into MD location, since it only buildsJason McIntyre
for some archs (currently sparc64); fix proposed by miod;
2008-09-12- make it possible to use a user defined MERGE_CMD instead of sdiffAntoine Jacoutot
mostly from andreas@ man page enhancing by jmc@ ok andreas@
2008-09-12- use shell built-in getopts instead of getopt(1)Antoine Jacoutot
- cleanup by adding usage and error_rm_wrkdir functions feedbacks from guenther@ sthen@ and jared r r spiegel, thank you! ok sthen
2008-09-12move dns lookups to its own (privilege revoking, not chrooting) process.Henning Brauer
reason: the parent process must never ever block, but the dns routines can. last not least this fixes ntpd -s 'hanging' for a long time. tested by a couple of people
2008-09-12Don't be to strict in find_iface() about what we accept on point-to-pointClaudio Jeker
links. If a packet arrived on a point-to-point interface we should accept it even if the source address of the packet is different to our iface destination address. OK norby@
2008-09-11remove hackery to un-demote after the session has been established forHenning Brauer
a while, we can now just use a timer (since i rewrote the timer code)
2008-09-11Do not clean ${PACKAGES} as this is the source files, if run without obj dirDale Rahn
present, it will delete the source files. Found by Steven Roberts.
2008-09-10sync synopsis and usage; documentation tweaks.Igor Sobrado
ok jmc@
2008-09-10Properly free allocated memory if carp_demote_get encounters an error.Tobias Stoeckmann
ok henning@
2008-09-10Proper format string modifiers and missing includes to get correct prototypesMiod Vallat
on 64-bit systems.
2008-09-10bzero' the option buffer with the correct buffer size. this fixesReyk Floeter
incomplete buffer initialization and possible incorrect option handling. Thanks to Nick Bender ok krw@ deraadt@
2008-09-08clean warnings on all architecturesTheo de Raadt