summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2004-05-26Send out a random 64-bit number as our transmit time. The NTPJakob Schlyter
server will copy said number into the originate field on the response that it sends us. This is totally legal per the SNTP spec. The impact of this is two fold: we no longer send out the current system time for the world to see (which may aid an attacker), and it gives us a (not very secure) way of knowing that we're not getting spoofed by an attacker that can't capture our traffic but can spoof packets from the NTP server we're communicating with. code by Alexander Guy. ok deraadt@
2004-05-26Better message if interface is not available. Hint from Daniel Polak.Otto Moerbeek
ok henning@ jmc@
2004-05-25include hostname in memory buffered logs, spotted byDamien Miller
ssurdock AT engineered-net.com; ok deraadt@
2004-05-25handle interface removals gracefully. reported by Oliver J. MoraisCan Erkin Acar
ok henning@, tedu@
2004-05-25SNTP is RFC 2030Jakob Schlyter
2004-05-25tun interface is stored in /var/run/cuaXX.if, not /var/run/ttyXX.if;Jason McIntyre
2004-05-25clarify how modems on serial ports attach, and their corresponding deviceJason McIntyre
numbers; inspired by a thread on misc@, and my own, er, experiences.. ok markus@
2004-05-24typos from Fabio Olive Leite;Jason McIntyre
2004-05-24- sort optionsJason McIntyre
- sync usage()
2004-05-24Fix copy paste error pointed out by jmc@Claudio Jeker
2004-05-24uppercase `id';Jason McIntyre
ok henning@
2004-05-24typo; From: Andrey Matveev <andrushock@korovino.net>Henning Brauer
2004-05-24missing close(2). Andrey MatveevJun-ichiro itojun Hagino
2004-05-23some readability fixes, mainly keeping things in alphabetical order;Jason McIntyre
ok henning@
2004-05-23add relevant rfc's to SEE ALSO;Jason McIntyre
suggested by Alexey E. Suslikov; help and ok henning@
2004-05-23- tcpdump is section 8, not 1Jason McIntyre
- uppercase `id' - update section on tun device creation - missing apostrophes - remove dead Xr's from SEE ALSO - Xr tun and ifconfig ok markus@
2004-05-22missing headerTheo de Raadt
2004-05-21Use '/' instead of ':' as separator for anchor path components. Note thatDaniel Hartmeier
the parser now needs quotes around paths containing separators. ok mcbride@
2004-05-21init fromlen; andrushock@korovino.netTheo de Raadt
2004-05-21Man page update to document the new network statements. OK henning@Claudio Jeker
2004-05-21Fix some gcc warnings in bgpctl because of the last commit. OK henning@Claudio Jeker
2004-05-21RFC 2796 bgp route reflector support. This is very useful in conjunctionClaudio Jeker
with templates. looks good, go for it henning@
2004-05-21Grrr. Forgot to cleanup dynamic announcements on shutdown.Claudio Jeker
2004-05-21move the big name tables to the .h file, makes the .c easierHenning Brauer
2004-05-21Make it possible to add, delete, flush and show network announcements.Claudio Jeker
OK henning@
2004-05-21Add support for dynamic announcements. Usefule to annouce temporaryClaudio Jeker
blackhole routes or to make network announcements dependent on a external state (e.g. for carp setups) OK henning@
2004-05-21add DLT_PPP_ETHER support plus some fixes for pppoe_if_print().Brad Smith
ok canacar@ From: Marc Huber <pppoe at pro-bono-publico dot de>
2004-05-20check for strdup(3) failure was missing in one case, catched byHenning Brauer
Andrey Matveev <andrushock@korovino.net>
2004-05-19Allow recursive anchors (anchors within anchors, up to 64Daniel Hartmeier
levels deep). More work required, but this is already functional. authpf users will need to adjust their anchor calls, but this will change again soon. ok beck@, cedric@, henning@, mcbride@
2004-05-19Add word boundary markers, so that the fast scanners get exactly what theyMarc Espie
are supposed to.
2004-05-18sendto() return code fixes; from andreq matveevJakob Schlyter
ok deraadt@
2004-05-17extend filter language to allow basic setting of COMMUNITIES attribute.Damien Miller
ok claudio@
2004-05-16Use arc4random(3) to compute random numbers, instead of using rand()Otto Moerbeek
to produce a double, snprintf()ing that into a buffer and then converting the string to an int with atoi(). ok millert@ henning@
2004-05-16Use arc4random(3) instead of rand(3) to compute random numbers.Otto Moerbeek
ok millert@ henning@
2004-05-15Workaround to work with the new multipath support. Do a RTM_GET first toClaudio Jeker
decide if a RTM_ADD or a RTM_CHANGE needs to be done when adding new routes. tested and OK henning@
2004-05-15Naming consistency. From Alexander Guy. ok canacar@Otto Moerbeek
2004-05-14Fix pppoe server mode. pppoe no longer chroots in server mode.Can Erkin Acar
the command 'allow users _ppp' must be added to the relevant section in ppp.conf. Found, tested and help claudio@ put that pppoe in deraadt@
2004-05-13as the authpf manpage describes, the connecting user's shell can beHenning Brauer
overloaded via login.conf. When verifying that the user's login shell is indeed authpf it is not sufficient to look at (struct passwd)->pw_shell, we also have to use login_getclass etc to check wether the shell gets overloaded. ok millert@ beck@
2004-05-13Pasto, change a cast from uid_t to gid_t (no real change...)Todd C. Miller
2004-05-13Set close on exec flag for cron's socket. Jarno HuuskonenTodd C. Miller
2004-05-13If we get EAGAIN reading from the cron socket check both cron andTodd C. Miller
at databases for jobs to run. Jarno Huuskonen.
2004-05-13Unswap the vhid and advskew values.Ryan Thomas McBride
2004-05-12tzsetHenning Brauer
2004-05-12tzsetHenning Brauer
2004-05-12like always I missed tzset(); Ben Lovett <ben@tilderoot.com>Henning Brauer
2004-05-11knfTheo de Raadt
2004-05-10write filter and lock bpf descriptor before dropping privileges,Can Erkin Acar
with help from otto@, tested by mickey@ and jolan@, ok deraadt@
2004-05-10Check return value of fclose() calls after writing.Otto Moerbeek
ok deraadt@ tdeval@
2004-05-10Do not always print banner page.Otto Moerbeek
ok henning@ millert@
2004-05-10Make the accept socket non-blocking. Should not matter since weTodd C. Miller
use select anyway but seems like a good idea since we really don't want cron to block...