summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2005-10-06I should have read the RFC more carefully.Claudio Jeker
...if only one of the instances has its LS age field set to MaxAge The important part is "only one", so check if both LSA are at MaxAge and in that case return 0 -- the LSAs are identical. This fixes a super nasty doom loop between two ospfd sending each other LSA updates at an incredible speed. Tested and OK norby@
2005-10-05the correct mask sign in table declarations is '&' (not '/').Reyk Floeter
2005-10-03typoMathieu Sauve-Frankel
ok claudio@
2005-10-02pkg_add -u does updates.Marc Espie
noticed by brad@
2005-09-30deploy .An -nosplit; ok jmcJared Yanovich
2005-09-30rewording for clarity;Jason McIntyre
ok reyk@
2005-09-30correct way to display a backslash is `\e' in mdoc;Jason McIntyre
grammar + spelling;
2005-09-30update the BNFReyk Floeter
2005-09-30implement a way to match IEEE 802.11 flooding. this will help to detectReyk Floeter
known DoS attacks, like de-auth flooding against wireless networks. an example is provided in the manual page. "or could you just got for it?", deraadt@
2005-09-30fix;5C the 'number' type, use a maximal value of LONG_MAX instead of 16.Reyk Floeter
2005-09-29Add event rule examplesReyk Floeter
2005-09-29order alphabeticallyReyk Floeter
2005-09-29Change DLT earlier. Fixes the loss of promisc mode when a non-defaultCan Erkin Acar
DLT is specified. looks sane deraadt@
2005-09-29Show the time a neighbor was DOWN instead of counting down fromClaudio Jeker
DEFAULT_NBR_TMOUT. Makes it easy to see since when a peer is dead. OK norby@ some time ago
2005-09-28- use proper function name in log messageMathieu Sauve-Frankel
ok norby@
2005-09-28use more strtonum(); from mkb@crypt.org.ruTheo de Raadt
2005-09-28err()->errx() and KNF; ok djm@Kevin Steves
2005-09-27Fix another case of inconstitent error handling that was missed in theOtto Moerbeek
previous commit. ok moritz@
2005-09-27use xargs -r0 for our build processTheo de Raadt
2005-09-27tweaks from wiz@netbsdJason McIntyre
2005-09-26deal with xargs new behaviour by using -r, okay deraadt@Pedro Martelletto
2005-09-26If setting the filter fails, pass the error back;Otto Moerbeek
ok deraadt@
2005-09-24- add auth_type and auth_keyid to struct ctl_ifaceMathieu Sauve-Frankel
- have ospfctl tell us when we are using authentication with 'show interface' ok claudio@ norby@
2005-09-24Add some code to just build the packing-list even if the package won'tMarc Espie
happen. Use -q and -Q for now, may change.
2005-09-24give it a bit highr priority and exit w/ failure if systcl ever fails; marc@ ↵Michael Shalayeff
henning@ ok some time ago...
2005-09-24pass actual items to prepare_long and check_name so that we can alsoMarc Espie
verify that modes/groups/owners are correct (code to come)
2005-09-24move uname/gname existence check into ArcCheck: Ustar archives deal withMarc Espie
this differently. Namely, use specific variables that default to the numeric value if the uid/gid don't exist in mkheader. Since the entry fields are not filled, ArcCheck gets all it needs for the package check.
2005-09-24Allows FETCH_CMD to replace ftp.Marc Espie
Note that, for simplicity, FETCH_CMD must be a single command with a full path. Use a script if you must.
2005-09-24mention marking of logs that have wrapped their buffer, from stevesk@Damien Miller
2005-09-24Log source address for 'malformed packet' errors. ok henning@Darren Tucker
2005-09-23Only allow root to run tcpdump. It's needed for the chroot security.Otto Moerbeek
ok moritz@ deraadt@
2005-09-23default port for ftp-proxy is 8021;Jason McIntyre
from johnb (pr #4520); ok deraadt@ ian@
2005-09-22boot-able -> bootable (typo fix in comments only)Jason McIntyre
from janne johansson (pr #4516)
2005-09-22consistency fixes, spotted by brian at awfulhak org;Jason McIntyre
2005-09-22add missing phrase;Jason McIntyre
ok brad@
2005-09-22add a few flags to CDIAGFLAGSBrad Smith
2005-09-21rearrange sanity checks to eliminate signed arithmatic, from stevesk@Damien Miller
2005-09-21grammar, spelling, formatting fixes...Jason McIntyre
2005-09-21Added some missing defines.Brad Smith
From ru FreeBSD
2005-09-21Add a radius_Flush() function that waits for the response (or timeout) toBrad Smith
any pending RADIUS transaction. Use this before sending RAD_STOP RADIUS messages so that we definitely ``stop'' the session. It was discovered that sometimes when the link timed out, we got lucky enough to have an un-ACK'd RADIUS accounting transaction in progress, resulting in the RAD_STOP message failing to send. From brian FreeBSD
2005-09-21Support a ``set rad_alive N'' command to enable periodic RADIUS accountingBrad Smith
information being sent to the RADIUS server. Logging of RADIUS accounting information moves to a ``set log [+-]radius'' level, along with the RADIUS alive info. From brian FreeBSD
2005-09-21Send NAS-IP-Address as well as NAS-IdentifierBrad Smith
Add ``disable NAS-IP-Address'' and ``disable NAS-Identifier'' options to support pre-rfc2865 RADIUS servers. This pushes our enable/disable items over the 32 bit limit, so reoganise things to allow a bunch more options. From brian FreeBSD
2005-09-21Avoid casts as lvalues.Brad Smith
From kan FreeBSD
2005-09-21If HISMACADDR is set in the environment, pass the value toBrad Smith
the RADIUS server as RAD_CALLING_STATION_ID. From brian FreeBSD
2005-09-21Send RADIUS gigaword data when OctetsIn or OctetsOut go over UINT32_MAX.Brad Smith
From dds FreeBSD
2005-09-21Make sure that "updates" with only MP withdraws (MP_UNREACH_NRLI) stopClaudio Jeker
processing after the MP withdraw block. OK henning@
2005-09-21when the route to a nexthop is a reject or blackhole route, the nexthopHenning Brauer
is invalid. add check for these flags. shows up with v6, many reject routes there. claudio ok
2005-09-21IPSec -> IPsecJason McIntyre
grammar from joel@
2005-09-21uppercase first letter of a sentence;Jason McIntyre
2005-09-21name union.Brad Smith
From ume FreeBSD