Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-05-26 | Send out a random 64-bit number as our transmit time. The NTP | Jakob Schlyter | |
server will copy said number into the originate field on the response that it sends us. This is totally legal per the SNTP spec. The impact of this is two fold: we no longer send out the current system time for the world to see (which may aid an attacker), and it gives us a (not very secure) way of knowing that we're not getting spoofed by an attacker that can't capture our traffic but can spoof packets from the NTP server we're communicating with. code by Alexander Guy. ok deraadt@ | |||
2004-05-26 | Better message if interface is not available. Hint from Daniel Polak. | Otto Moerbeek | |
ok henning@ jmc@ | |||
2004-05-25 | include hostname in memory buffered logs, spotted by | Damien Miller | |
ssurdock AT engineered-net.com; ok deraadt@ | |||
2004-05-25 | handle interface removals gracefully. reported by Oliver J. Morais | Can Erkin Acar | |
ok henning@, tedu@ | |||
2004-05-25 | SNTP is RFC 2030 | Jakob Schlyter | |
2004-05-25 | tun interface is stored in /var/run/cuaXX.if, not /var/run/ttyXX.if; | Jason McIntyre | |
2004-05-25 | clarify how modems on serial ports attach, and their corresponding device | Jason McIntyre | |
numbers; inspired by a thread on misc@, and my own, er, experiences.. ok markus@ | |||
2004-05-24 | typos from Fabio Olive Leite; | Jason McIntyre | |
2004-05-24 | - sort options | Jason McIntyre | |
- sync usage() | |||
2004-05-24 | Fix copy paste error pointed out by jmc@ | Claudio Jeker | |
2004-05-24 | uppercase `id'; | Jason McIntyre | |
ok henning@ | |||
2004-05-24 | typo; From: Andrey Matveev <andrushock@korovino.net> | Henning Brauer | |
2004-05-24 | missing close(2). Andrey Matveev | Jun-ichiro itojun Hagino | |
2004-05-23 | some readability fixes, mainly keeping things in alphabetical order; | Jason McIntyre | |
ok henning@ | |||
2004-05-23 | add relevant rfc's to SEE ALSO; | Jason McIntyre | |
suggested by Alexey E. Suslikov; help and ok henning@ | |||
2004-05-23 | - tcpdump is section 8, not 1 | Jason McIntyre | |
- uppercase `id' - update section on tun device creation - missing apostrophes - remove dead Xr's from SEE ALSO - Xr tun and ifconfig ok markus@ | |||
2004-05-22 | missing header | Theo de Raadt | |
2004-05-21 | Use '/' instead of ':' as separator for anchor path components. Note that | Daniel Hartmeier | |
the parser now needs quotes around paths containing separators. ok mcbride@ | |||
2004-05-21 | init fromlen; andrushock@korovino.net | Theo de Raadt | |
2004-05-21 | Man page update to document the new network statements. OK henning@ | Claudio Jeker | |
2004-05-21 | Fix some gcc warnings in bgpctl because of the last commit. OK henning@ | Claudio Jeker | |
2004-05-21 | RFC 2796 bgp route reflector support. This is very useful in conjunction | Claudio Jeker | |
with templates. looks good, go for it henning@ | |||
2004-05-21 | Grrr. Forgot to cleanup dynamic announcements on shutdown. | Claudio Jeker | |
2004-05-21 | move the big name tables to the .h file, makes the .c easier | Henning Brauer | |
2004-05-21 | Make it possible to add, delete, flush and show network announcements. | Claudio Jeker | |
OK henning@ | |||
2004-05-21 | Add support for dynamic announcements. Usefule to annouce temporary | Claudio Jeker | |
blackhole routes or to make network announcements dependent on a external state (e.g. for carp setups) OK henning@ | |||
2004-05-21 | add DLT_PPP_ETHER support plus some fixes for pppoe_if_print(). | Brad Smith | |
ok canacar@ From: Marc Huber <pppoe at pro-bono-publico dot de> | |||
2004-05-20 | check for strdup(3) failure was missing in one case, catched by | Henning Brauer | |
Andrey Matveev <andrushock@korovino.net> | |||
2004-05-19 | Allow recursive anchors (anchors within anchors, up to 64 | Daniel Hartmeier | |
levels deep). More work required, but this is already functional. authpf users will need to adjust their anchor calls, but this will change again soon. ok beck@, cedric@, henning@, mcbride@ | |||
2004-05-19 | Add word boundary markers, so that the fast scanners get exactly what they | Marc Espie | |
are supposed to. | |||
2004-05-18 | sendto() return code fixes; from andreq matveev | Jakob Schlyter | |
ok deraadt@ | |||
2004-05-17 | extend filter language to allow basic setting of COMMUNITIES attribute. | Damien Miller | |
ok claudio@ | |||
2004-05-16 | Use arc4random(3) to compute random numbers, instead of using rand() | Otto Moerbeek | |
to produce a double, snprintf()ing that into a buffer and then converting the string to an int with atoi(). ok millert@ henning@ | |||
2004-05-16 | Use arc4random(3) instead of rand(3) to compute random numbers. | Otto Moerbeek | |
ok millert@ henning@ | |||
2004-05-15 | Workaround to work with the new multipath support. Do a RTM_GET first to | Claudio Jeker | |
decide if a RTM_ADD or a RTM_CHANGE needs to be done when adding new routes. tested and OK henning@ | |||
2004-05-15 | Naming consistency. From Alexander Guy. ok canacar@ | Otto Moerbeek | |
2004-05-14 | Fix pppoe server mode. pppoe no longer chroots in server mode. | Can Erkin Acar | |
the command 'allow users _ppp' must be added to the relevant section in ppp.conf. Found, tested and help claudio@ put that pppoe in deraadt@ | |||
2004-05-13 | as the authpf manpage describes, the connecting user's shell can be | Henning Brauer | |
overloaded via login.conf. When verifying that the user's login shell is indeed authpf it is not sufficient to look at (struct passwd)->pw_shell, we also have to use login_getclass etc to check wether the shell gets overloaded. ok millert@ beck@ | |||
2004-05-13 | Pasto, change a cast from uid_t to gid_t (no real change...) | Todd C. Miller | |
2004-05-13 | Set close on exec flag for cron's socket. Jarno Huuskonen | Todd C. Miller | |
2004-05-13 | If we get EAGAIN reading from the cron socket check both cron and | Todd C. Miller | |
at databases for jobs to run. Jarno Huuskonen. | |||
2004-05-13 | Unswap the vhid and advskew values. | Ryan Thomas McBride | |
2004-05-12 | tzset | Henning Brauer | |
2004-05-12 | tzset | Henning Brauer | |
2004-05-12 | like always I missed tzset(); Ben Lovett <ben@tilderoot.com> | Henning Brauer | |
2004-05-11 | knf | Theo de Raadt | |
2004-05-10 | write filter and lock bpf descriptor before dropping privileges, | Can Erkin Acar | |
with help from otto@, tested by mickey@ and jolan@, ok deraadt@ | |||
2004-05-10 | Check return value of fclose() calls after writing. | Otto Moerbeek | |
ok deraadt@ tdeval@ | |||
2004-05-10 | Do not always print banner page. | Otto Moerbeek | |
ok henning@ millert@ | |||
2004-05-10 | Make the accept socket non-blocking. Should not matter since we | Todd C. Miller | |
use select anyway but seems like a good idea since we really don't want cron to block... |