summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2009-09-17The client API is meant to require STARTTLS by default, a behaviour whichJacek Masiulaniec
can be altered using client_ssl_optional(). Reported by Michael Lechtermann <michael@lechtermann.net>
2009-09-17tweak previous; ok jacekmJason McIntyre
2009-09-17Add instructions for enabling smtpd to the EXAMPLES section.Jacek Masiulaniec
Suggested by sthen@
2009-09-16Do not print "could not load cert" warning at startup if certificate is notJacek Masiulaniec
required. Requested by jmc@, gilles@ ok.
2009-09-16+.Xr mailer.conf 5 ,Jason McIntyre
ok jacekm
2009-09-16Free resources when bounce enqueue fails due to a timeout.Jacek Masiulaniec
2009-09-16Ignore sendmail's -L, -A, and -q switches: makes clientmqueue cronJacek Masiulaniec
job exit silently.
2009-09-15Extend SMTP client_* API to support SSL+AUTH, and use it in the mtaJacek Masiulaniec
process to relay mails. ok gilles@
2009-09-15Enclose repeated buffer draining code in a new msgbuf_drain()Jacek Masiulaniec
function, which is additionally exported for use by others. It will be needed by smtpd's SSL module when the SMTP client code is changed to replace libevent's evbuffers with our msgbuf_* API. ok gilles@ henning@ guenther@ eric@
2009-09-15In bgpctl sh nei, display whether a neighbour is set to use passiveStuart Henderson
mode and/or E-BGP multihop. Ok and suggestions from claudio@
2009-09-15Fix a small merge error from august 2003. ok jmc@, jj@.Matthieu Herrb
2009-09-14Switch the various link state printing codes to use the new if_mediaClaudio Jeker
independent LINK_STATE_DESCRIPTIONS. Code is now more or less a one to one copy of get_linkstate() in route/route.c. OK henning, michele, sthen, deraadt
2009-09-14fix typo; ok jmc@Ingo Schwarze
also reported upstream to dhcp dash bugs at isc dot org
2009-09-12Simplify line len checking: use one limit for all SMTP exchanges.Jacek Masiulaniec
This is not as strict as various RFCs want it, but we can make it more granular later. For now, let all mails flow by using the maximum of all limits found in the RFCs. ok gilles@
2009-09-12fix a wrong computation in session_readline() where the length of line wasGilles Chehade
deduced from the buffer size prior and after evbuffer_readline() call. the problem is that this accounts for the characters which evbuffer_readline() removed and we do not know how many they were (\n, \r\n ..). fix just does a strlen() call of line which is a bit slower but way safer. This could very well fix the broken headers issue some people reported
2009-09-12cmdlinetoolong stat was incremented at the wrong place, fixGilles Chehade
2009-09-12- fix a compile time warningGilles Chehade
- add a new stats counter to distinguish between command lines which exceeded the limit and data lines which exceeded the limits
2009-09-12replace a fwrite || fwrite construct with a fprintf which achieves the sameGilles Chehade
while being less error prone
2009-09-09Palm: Integration into the treeMarek Vasut
OK deraadt@
2009-09-08Add -4 and -6 flags to irrfilter mode, allowing you to only fetch (youStuart Henderson
guessed it) v4 or v6 from the IRR. Reduces size of the filter file (and thus router resource use) when you only speak IPv4 but you want to filter peers who announce lots of v6 space. ok claudio@
2009-09-08Make the BGP OPEN capability parser RFC 5492 compliant. While there addClaudio Jeker
additional checks to make sure the known capabilities are correctly encoded and not truncated. Help and OK sthen@
2009-09-08Update irrfilter to support IPv6 and 4-byte AS numbers. IPv6 support basedClaudio Jeker
on work by Tonnerre Lombard I just cleaned it up. OK henning, sthen
2009-09-08Cope with remote host sending '452 Insufficient system storage'.Landry Breuil
Committing on behalf of gilles@ who doesn't have access to a safe box.
2009-09-08Replace remaining occurrence of old PF syntax with "match...nat-to",Stuart Henderson
and just talk about "rules" rather than "filter and translation rules". Spotted by/ok jmc@
2009-09-08Remove some nat-anchor, binat-anchor, rdr-anchor. Noticed by jmc@.Stuart Henderson
ok henning@
2009-09-07Don't print package comment when -q is given, and no other option isLandry Breuil
used. This way, pkg_info -q only shows installed pkgnames.. and can replace `ls /var/db/pkg` in scripts. ok espie@
2009-09-07Teach the printer about capabilities, new cease codes, end-of-rib marker,Stuart Henderson
and handle 32-bit ASN. ok claudio@
2009-09-07rdr -> rdr-toJason McIntyre
from Karl-Heinz Wild
2009-09-06When dvmrpd receives a prune, it must checks if every downstream memberMichele Marchetto
on that interfaces has already sent prunes. If so (and there are no local groups) removes the interface from the downstream list. ok claudio@
2009-09-04Fix scheduling of bounces that could not be delivered.Jacek Masiulaniec
ok gilles@
2009-09-04Fix scheduling of bounces that could not be delivered.Jacek Masiulaniec
ok gilles@
2009-09-04Prepend Return-Path.Jacek Masiulaniec
2009-09-04Fix scheduling of bounce messages.Jacek Masiulaniec
From gilles@
2009-09-04Dvrmpd inherited the same yesno porblem from bgpd. Make sure it throwsClaudio Jeker
a proper syntax error.
2009-09-04Make sure that a proper syntax error is produced when something else thenClaudio Jeker
yes or no is used in a yes/no token. OK henning
2009-09-04merged with mda.cJacek Masiulaniec
2009-09-04Use the address familiy of the neighbor IP to decide which MP type to use.Claudio Jeker
IPv4 session will still default to only announce inet unicast but now IPv6 session will by default use announce inet6 unicast. The defaults can be overridden on groups and in the neighbor itself but this new behaviour is way more sane then the old one. OK henning, sthen
2009-09-04Major mda update:Jacek Masiulaniec
- Fix: check external mda / mail.local exit code. - Fix: check maildir rename(2) return code. - Fix: check read(2) and write(2) return codes. - Fix: in parent, batchp->env was not set to the env of the current process. - Fix: clean file in tmp if maildir delivery fails. - Fix: mark message as temporarily failed upon start, unmark upon sucessful delivery. (safe default) - Fix: kill all message drops, aka. PERMFAILUREs, with one exception: when the local user no longer exists. - Cleanup: store.c is merged with its only user, mda.c - Feature: in parent, child_add now returns pointer to the new child struct. This is used to store and later access child->mda_batch member in order to associate children with their batches. - Feature: in parent, external mda / mail.local will timeout after 5 minutes.
2009-09-04Fix a crash when messagep->batch_id is read from disk and used longJacek Masiulaniec
after the batch has ceased to exist. From gilles@
2009-09-03Add support for "DHCP-over-IPsec" by implementing RFC 3046 (DHCP RelayReyk Floeter
Agent Information Option) and RFC 3456 (DHCP Configuration of IPsec Tunnel Mode). This allows to configure various IPsec clients dynamically via DHCP; dhcrelay needs to listen on enc0 and forward requests to a DHCP server that supports RFC 3046, like I recently did for dhcpd(8). ok krw@
2009-09-03Use correct destination in memcpy(). Fixes PR6218, OK henningClaudio Jeker
2009-09-03imsg_get sets errno so use fatal instead of fatalx.Jacek Masiulaniec
2009-09-02Prepend Delivered-To, not append. Discussed with gilles@.Jacek Masiulaniec
2009-09-02Include mbox write errors in "show stats". Suggested by gilles.Jacek Masiulaniec
2009-09-02Do not lose mail when write(2) to mbox fails.Jacek Masiulaniec
2009-09-02remove dead code, gilles okJacek Masiulaniec
2009-09-02Correct the currently supported RFC level of the IPv6CP support,Stuart Henderson
we have supported RFC2472 for some time. From Brad.
2009-09-02Implement all of RFC 4486 BGP Cease Notification Message Subcodes.Claudio Jeker
The other side should now see why a session was dropped. e.g: bgpd: ... received notification: Cease, administratively down OK henning
2009-09-01Log all 4yz/5yz responses we send when in debug mode; ok gilles@Jacek Masiulaniec
2009-09-01Bring manpage up to speed with the changes that just happend or at leastClaudio Jeker
try to.