summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2006-06-01Copy the pftableid in path_copy and correctly do the ref/unref dance inClaudio Jeker
path_copy and path_put. Diff from Kevin Brintnall, looks good henning@
2006-06-01don't use the newline character in hostapd_log() callsReyk Floeter
2006-06-01More kroute.c cleanup and start using the routing socket to track interfaceClaudio Jeker
states.
2006-06-01small tweaks;Jason McIntyre
2006-06-01Remove some unneeded lint goo and use setres[ug]id() instead of the setuidClaudio Jeker
dance.
2006-06-01implement adjacent nbr count, needed when we want to decide where to floodEsben Norby
multicast streams.
2006-06-01slightly better englishMartin Reindl
2006-06-01Pass the captured packet length in addition to the real packet lengthMoritz Jodeit
to etherip_print() and do all the bounds checking with it. Also add bounds checks to ether_print(). This fixes even more crashes. ok canacar@
2006-06-01hook dvmrpctl and dvmrpd into builds.Esben Norby
ok deraadt@
2006-06-01Controller for dvmrpd.Esben Norby
Almost all available information in dvmrpd can be read. Not connected to builds yet. ok claudio@
2006-06-01Welcome dvmrpdEsben Norby
started by Esben Norby some time ago by using the imsg/three process framework of ospfd. Right now it is not particularly useful, major parts are still missing but is imported to allow more people to work on it. Status: The IGMP part is mostly complete, allowing clients to join and leave groups. Election the IGMP querier of a network is also functional, only thing missing is some corner cases when going from non-querier to querier. About half of the DVMRP is functional, probes and route reports are functional. Multicast streams can be detected and the MFC can be manipulated. The RIB is not complete but operational. Not yet connected to the builds. OK claudio@
2006-06-01start sentence with a capital letter;Jason McIntyre
2006-06-01simplify example, ok grange, jmcMarkus Friedl
2006-06-01even though the bounds are long long having an upper bound ofOtto Moerbeek
ULONG_MAX does not work; the max upper bound is LONG_MAX, since LONG_MAX == LLONG_MAX on 64bit archs. ok deraadt@ henning@
2006-06-01Sort options in usage. From jmc.Chris Kuethe
ok henning@
2006-06-01When expanding servers, do not forget to copy weight. ok henning@Otto Moerbeek
2006-06-01urgs, other stuff snuck inHenning Brauer
2006-06-01do not use /dev/hotplug for now, only one reader supported yetHenning Brauer
2006-06-01put back regular sensors scanningHenning Brauer
2006-05-31Missing $OpenBSD$ tag. Spotted by Masao Uebayashi.Chris Kuethe
ok henning@
2006-05-31more tweaks; ok grangeJason McIntyre
2006-05-31tweak the sample attach script; ok grangeJason McIntyre
2006-05-31- tidy up SYNOPSISJason McIntyre
- sort options - +.Xr pf 4 ,
2006-05-31Support for "[no] redistribute 10.6/16", all routes that match into thisClaudio Jeker
range will match this "rule". This should be it, now it is time to write some documentation.
2006-05-31More redistribute fun. Add a possibility to deny redistribution of specifiedClaudio Jeker
routes via "no redistribute rtlabel admin". Redistribute rules are parsed in order and the first match is used. Only exception is "redistribute default" Which is independent of the other rules and can't be negated.
2006-05-31This diff makes dhcpd able to manipulate pf tables on certain lease events.Chris Kuethe
dhcpd is now able to place abandoned addresses into a table (to offer some protection against machines camping on an address) and remove them from the table if they are properly leased. When dhcpd assigns an IP to a new hardware address, it can remove that address from a table. This is for use with the overload table in pf; newly arrived machines will not be punished for the actions of a machine that went away. beck@ and krw@ liked previous versions of this, henning@ final ok
2006-05-31Plug memory leak; ok claudio@Patrick Latifi
2006-05-31Plug memory leaks in error path; ok henning@Patrick Latifi
2006-05-31remove extra space in output; ok markus@ moritz@Kevin Steves
2006-05-31only actually run sensor_query when it is due, not every time poll returnsHenning Brauer
2006-05-30This patch renames dhcpd's "struct timeout" to "struct dhcpd_timeout"Chris Kuethe
so as not to conflict with "struct timeout" from <sys/timeout.h>. ok henning@
2006-05-30Correctly calculate point-to-point nexthop address. The logic was badly twistedClaudio Jeker
but funnily worked for routers with just one point-to-point link. Found by Marc Winiger. OK norby@
2006-05-30Uups, this file should be commited with the redistribute rtlabel stuff.Claudio Jeker
2006-05-30Now that rtlabels are accessable via sysctl we can use route lables toClaudio Jeker
define which routes should be redistributed via OSPF. So now you can define the export list on a fine graded basis. More to come... OK norby@
2006-05-29When ntpd backs off polling due to a negative delay, tell the user how longChris Kuethe
it will wait until the next poll. ok henning@
2006-05-29No need for return; at end of functions returning void.Moritz Jodeit
2006-05-29better wording for the "weight" section;Jason McIntyre
2006-05-29Be more careful to not touch memory outside theMoritz Jodeit
captured packet. Fixes some more crashes. ok canacar@ deraadt@
2006-05-29repair some broken indentation in an example; ok jmc@Kevin Steves
2006-05-29document the optional "weight" keyword, and a little cleanup;Jason McIntyre
from henning and myself
2006-05-29ANSI and whitespace. No binary change.Moritz Jodeit
2006-05-29Check that struct p8022Hdr was completely captured,Moritz Jodeit
before accessing it. With some cleanup from canacar@ ok canacar@
2006-05-29The end pointer to fn_print() could possibly point behind the capturedMoritz Jodeit
packet. So make sure, it uses "snapend" in that case. ok canacar@
2006-05-29Add proper bounds checks for the CDP and SSDP protocols byMoritz Jodeit
grouping all LLCSAP_SNAP handling in one block. Also make sure, that enough of "struct llc" was captured, before accessing it. ok canacar@
2006-05-29Delay lsa database deletes for MIN_LS_INTERVAL seconds so that flappingClaudio Jeker
routes do not cause a update storm. OK norby@
2006-05-29Remove useless debug message that gets triggered all the time in big networks.Esben Norby
ok claudio@
2006-05-29when we cannot open /dev/hotplug, donn't bail, just work withoutHenning Brauer
with ckuethe
2006-05-28Even better nexthop delete behaviour. Do not delete nexthop if they are usedClaudio Jeker
by filter sets or if the nexthop is currently looked up. With this the "nexthop_update: non-existent nexthop" warning should be history. OK henning@
2006-05-28Correct more bounds checks which can lead to crashes.Moritz Jodeit
ok canacar@ deraadt@
2006-05-28Preload and pin nexthop used in filtersets so the are validiated when used.Claudio Jeker
This will fix problems with set nexthop on outgoing filters. Found by gluk@ OK henning@