Age | Commit message (Collapse) | Author | |
---|---|---|---|
2008-10-04 | tighter specs (tested for ages locally) | Marc Espie | |
2008-10-04 | explicitly pad & pack the packetdata structure thrown around on the wire, | Theo de Raadt | |
just like in traceroute6. | |||
2008-10-03 | Readability changes. | Marc Balmer | |
2008-10-03 | KNF and readability changes; no binary changes. | Marc Balmer | |
2008-10-03 | Unify code between the various flavors of imsg buffer.c. | Eric Faurot | |
Use unsigned int for msg_iovlen. ok henning@ claudio@ | |||
2008-10-03 | correct comment; a part of PR4184 | Theo de Raadt | |
2008-10-03 | Use correct function signature when calling the write_host_header hook. | Marc Balmer | |
from Josh Elsasser <josh@elsasser.org>, thanks. | |||
2008-10-02 | get rid of some unneeded $Id stuff | Theo de Raadt | |
2008-10-02 | Repair "set reconnect random 0" from PR 5368. This bug report was ignored | Theo de Raadt | |
since Feb 2007, even though it had a patch. How did this happen?? | |||
2008-10-02 | use calloc() instead of malloc() and bzero() | Theo de Raadt | |
2008-10-02 | in priv_settime(), we must not adjust the 'next' timestamps on their for | Henning Brauer | |
the offset since we use monotime for these for some time now, and monotime is not affected by system time changes (like, duh, that was the reason for the change). PR5927 | |||
2008-10-02 | correct path for isakmpd/local.pub; from Matthew Dempsky | Jason McIntyre | |
2008-09-30 | fix ugly comments. | Pierre-Yves Ritschard | |
2008-09-30 | add missing copyright. | Pierre-Yves Ritschard | |
2008-09-30 | aldap library -- Replacement for openldap used in ypldap. aldap is an ↵ | aschrijver | |
semi-asynchronous client interface to connect to LDAP servers. | |||
2008-09-29 | initialize both sides of the lockpipe (only used in debug mode) to -1 to | Theo de Raadt | |
have averted the bug found in pr 5938 | |||
2008-09-29 | do not close a random file descriptor in debug mode, PR 5938 from mickey | Theo de Raadt | |
2008-09-29 | add prototype for Carp::croak to prevent error under perl 5.10 | Simon Bertrang | |
feedback by espie@, prodded by millert@ | |||
2008-09-29 | fix log option with filter rules | Reyk Floeter | |
2008-09-29 | also log the label if available for the matching rule node (like the | Reyk Floeter | |
URL filter category etc.) | |||
2008-09-29 | spacing | Reyk Floeter | |
2008-09-29 | Change parsing of comments in external rule files. The hash mark may | Reyk Floeter | |
appear in URLs (eg. /index.html#anchor), so only allow full-line comments indicated by a hash mark # at the beginning of a line. | |||
2008-09-29 | allow to load expect, filter, log, and remove keys from external files | Reyk Floeter | |
just containing on key per line. this allows easier use of URL white/blacklists from external sources. | |||
2008-09-29 | Correct the logic when matching prefixes. This solves issues where IPv6 | Claudio Jeker | |
prefixes where matched on a simple deny from any prefix 0.0.0.0/0 rule. OK henning@ | |||
2008-09-29 | sort tokens for better readability | Reyk Floeter | |
2008-09-29 | allow to listen on a port range for redirections. this fixes | Reyk Floeter | |
stickyness with web applications that cannot do the clustering on their own and require stickyness with HTTP to HTTPS migration. this is required in many cases; it is a true fact that we cannot always fix the backend application in the real world. Tested and requested by many | |||
2008-09-29 | Refactor code that handles the kroute interfaces and make it possible to | Claudio Jeker | |
learn new interfaces during runtime. This should solve the issue with reloads failing when interfaces where created during runtime. OK norby@ | |||
2008-09-28 | ntpd does not require you to run rdate -n before it -- it notices such an | Theo de Raadt | |
event. so don't use the word "before" .. and leave the mention ambigious ok henning | |||
2008-09-26 | add [-s socket] to usage(); | Jason McIntyre | |
2008-09-26 | allow to add an additional restricted control socket for trap sending | Reyk Floeter | |
only (not even show commands). this allows to place a socket for traps in another daemon's chroot. (based on restricted socket support from bgpd) | |||
2008-09-19 | Merge printb() fix from ifconfig.c -r 1.157: | Marco Pfatschbacher | |
Don't increment a pointer *before* testing it for NULL. OK canacar@ | |||
2008-09-19 | typo | Pierre-Yves Ritschard | |
spotted by uw at o3si dot de | |||
2008-09-18 | add -A to SYNOPSIS; | Jason McIntyre | |
2008-09-18 | document -A and include in usage | Otto Moerbeek | |
2008-09-18 | Add a flag to print amap usage. | Artur Grabowski | |
otto@ ok | |||
2008-09-17 | - when merging a file, add a key to see a diff between the merged file | Antoine Jacoutot | |
and the new or old one requested by todd@ months ago "I like the idea" fgsch@, "should be in" todd@ | |||
2008-09-15 | Sync with dhcpd. Do not use < 0 to check for failed syscalls use == -1 | Claudio Jeker | |
instead. OK henning@ | |||
2008-09-15 | When checking if a syscall like open(), ioctl() or writev() failed compare | Claudio Jeker | |
directly against -1 and do not use a < 0 test. OK henning@ | |||
2008-09-12 | install the man page into MD location, since it only builds | Jason McIntyre | |
for some archs (currently sparc64); fix proposed by miod; | |||
2008-09-12 | - make it possible to use a user defined MERGE_CMD instead of sdiff | Antoine Jacoutot | |
mostly from andreas@ man page enhancing by jmc@ ok andreas@ | |||
2008-09-12 | - use shell built-in getopts instead of getopt(1) | Antoine Jacoutot | |
- cleanup by adding usage and error_rm_wrkdir functions feedbacks from guenther@ sthen@ and jared r r spiegel, thank you! ok sthen | |||
2008-09-12 | move dns lookups to its own (privilege revoking, not chrooting) process. | Henning Brauer | |
reason: the parent process must never ever block, but the dns routines can. last not least this fixes ntpd -s 'hanging' for a long time. tested by a couple of people | |||
2008-09-12 | Don't be to strict in find_iface() about what we accept on point-to-point | Claudio Jeker | |
links. If a packet arrived on a point-to-point interface we should accept it even if the source address of the packet is different to our iface destination address. OK norby@ | |||
2008-09-11 | remove hackery to un-demote after the session has been established for | Henning Brauer | |
a while, we can now just use a timer (since i rewrote the timer code) | |||
2008-09-11 | Do not clean ${PACKAGES} as this is the source files, if run without obj dir | Dale Rahn | |
present, it will delete the source files. Found by Steven Roberts. | |||
2008-09-10 | sync synopsis and usage; documentation tweaks. | Igor Sobrado | |
ok jmc@ | |||
2008-09-10 | Properly free allocated memory if carp_demote_get encounters an error. | Tobias Stoeckmann | |
ok henning@ | |||
2008-09-10 | Proper format string modifiers and missing includes to get correct prototypes | Miod Vallat | |
on 64-bit systems. | |||
2008-09-10 | bzero' the option buffer with the correct buffer size. this fixes | Reyk Floeter | |
incomplete buffer initialization and possible incorrect option handling. Thanks to Nick Bender ok krw@ deraadt@ | |||
2008-09-08 | clean warnings on all architectures | Theo de Raadt | |