summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2011-03-28tweak previous;Jason McIntyre
2011-03-28Add a couple of examples on tcpflags and icmptype filtersgiovanni
ok claudio@
2011-03-27add a function to factorize resetting of dnssession events.Eric Faurot
ok gilles@
2011-03-27add missing CVS markers and update copyright year.Eric Faurot
ok gilles@
2011-03-26missing file in previous commitEric Faurot
ok gilles@
2011-03-26Fix the MX lookup process:Eric Faurot
- the MX records were not always properly inserted into the sorted array, which led to some MX being silently dropped. - if an MX address could not be resolved, mail delivery would fail, even though other valid MX exist for that domain. Now only report the failure if no server address can be found at all. grrrreeat gilles@
2011-03-26check that we actually have a stdio stream opened for the message beforeGilles Chehade
trying to close it in a mta session. in case of DNS errors; this pointer will remain NULL and cause a segv in MTA_DONE state.
2011-03-26Tweak the asr API to make things a bit smoother on the user side.Eric Faurot
Then asr_run() call now returns ASR_COND when a condition on a FD is expected. The exact condition (readable or writeable) is specified in the asr_result structure, along with the fd and timeout. ok gilles@
2011-03-26Merge a reverse lookup query implementation into asr.Eric Faurot
Not used by the rest of smtpd for now. ok gilles@
2011-03-26have the client API receive a stdio stream rather than a fd to the messageGilles Chehade
fd. this shifts responsibility for the fclose to the caller, prevents a memory leak and makes everyone happy. diff by Jared Yanovich, thanks !
2011-03-26use an index for iterating into the mx list.Eric Faurot
ok gilles@
2011-03-25Use the rdomain information returned by DIOCNATLOOK to install theClaudio Jeker
nat-to and rdr-to rules with correct rtable rule attributes. This allows to use ftp-proxy to proxy accross rdomains. Tested and OK phessler@, OK henning@
2011-03-25Rewrite the lsack generation. Make it more like the lsupdate code.Claudio Jeker
Removes some of the rather strange packet handling. Tested by a few especially sthen@
2011-03-24Make the sequence number constanst explicitly unsigned. The seq_num isClaudio Jeker
already defined as a u_int32_t type.
2011-03-24Fix some memory leaks. Mainly better cleanup on shutdown but the v_nexthopClaudio Jeker
leak is a runtime one. OK bluhm@
2011-03-23The asr structure must always be freed in asr_done(). This is aEric Faurot
left-over from a former implementation where asr_ctx didn't exist and struct asr was refcounted. spotted by Jared Yanovich. ok gilles@
2011-03-23Simplify resolver initialization. This is done only onceEric Faurot
since resolv.conf reloading is handled automatically by asr. ok gilles@
2011-03-23remove unused states in enumEric Faurot
ok gilles@
2011-03-23cache user name for ~userMarc Espie
2011-03-23allow scp://hostname/~user/subdir to workMarc Espie
2011-03-23Print a warning when rtsol or rtsold are used to do IPv6 autoconfigurationAlexander Bluhm
but accepting redirects is turned off. If the -F switch is given, set sysctl net.inet6.icmp6.rediraccept to 1 instead. ok claudio@ deraadt@ sthen@
2011-03-22Don't be to strict when checking the length of an ospf packet.Claudio Jeker
Allow for padding bytes in the IP packet (length > ntohs(op->ospf_len)) but report both length in that case. OK sthen@, deraadt@
2011-03-22use timerclear macroOkan Demirmen
ok miod@
2011-03-21do not close msgfd in bounce_session(), it is closed by client_close()Gilles Chehade
2011-03-21- reset smtp_client pointer to NULL after client_close()Gilles Chehade
- datafd is closed in client_close()
2011-03-21fix a memory leak in client.c and properly close envelope inGilles Chehade
queue_shared.c diff from Jared Yanovich, sent to bugs@ by Jonny Mosco
2011-03-20document new stuffMarc Espie
2011-03-20pass url name to Ustar, for error messagesMarc Espie
2011-03-20allow Ustar to be more precise in its error messages: record positionMarc Espie
in archive, and caller can set description of file handle
2011-03-19use timerclear macroOkan Demirmen
ok henning@
2011-03-19Pass the new -c option to grotty when building manuals, to avoid ANSIIngo Schwarze
escape sequences and continue using traditional backspace escaping. Using feedback from millert@ and espie@. Tested by landry@ in bulk builds. ok naddy@ landry@ When installing this patch, make sure to upgrade your textproc/groff package to groff-1.21 before trying to build ports, because the old groff-1.15 grotty will error out when being fed the -c option.
2011-03-19I can remove duplicate flag since that's handled upwards.Marc Espie
2011-03-19put back -L in handle_options, so that it works in pkg_add/pkg_delete/pkg_createMarc Espie
prompted by jmc@, noticed by Gregory Edigarov
2011-03-19fix some name[=value] horrors;Jason McIntyre
2011-03-19Xr pkg.conf.5; from Patrick LamaiziereJason McIntyre
ok espie
2011-03-16fix trap sending in snmpd by adjusting snmpctl to the imsg libutilReyk Floeter
change and fixing the ber element handling in snmpd itself. tested by jsg@
2011-03-16spelling.Okan Demirmen
ok yasuoka@
2011-03-16use timerclear macro. while here, fix spelling.Okan Demirmen
ok yasuoka@
2011-03-15let smtpd use user-provided Diffie-Hellman parameters for ephemeral keyGilles Chehade
exchange. if no DH parameters are found, fallback to builtin parameters as was done until now. since we now accept user-provided DH parameters, make smtpd more strict and fatal() if the parameters are bogus. bump the key size of the DH parameters from 512bits to 1024bits, it might be bumped further after some more research. thanks to mikeb@ for his suggestions diff ok mikeb@ , man ok jmc@
2011-03-15use appropriate timerclear macro - from Christiano F. HaesbaertOkan Demirmen
ok mcbride@
2011-03-13consistently use "Wake on LAN (WoL)"; i don;t care if anyone wants toJason McIntyre
change that, but let's keep it consistent; ok stsp
2011-03-12Fix previous commit. When data arrives from the client before theAlexander Bluhm
server connection is set up, do not enable read events for the other side.
2011-03-12A connection that is constantly sending data uni-directionaly fromAlexander Bluhm
the client to the server did always trigger the session timeout. The reason for this behavior was that any read event reset the client side timeout. A read event on one side must reset the timeout for the other side instead. ok deraadt@
2011-03-12Bad bad Claudio. Fix an evil bug that caused nbr addr_tree corruption.Claudio Jeker
Do not insert neighbors first to the address tree and then assign the address to the struct. Instead pass the address to nbr_new() so all keys for the various RB trees are available when setting the neighbor up.
2011-03-12Log the fact that a session was not accepted because of missing HELLOs.Claudio Jeker
2011-03-09smtpctl show stats displays inet4/inet6 repartition for incoming sessionsGilles Chehade
2011-03-09make similar code .. more similarTodd T. Fries
ok gilles@ previous commit should have read: when copying 'struct sockaddr' data, use sa_len not sizeof(struct sockaddr_in) this fixes truncation of IPv6 addresses in the mail delivery path ok gilles@
2011-03-09*** empty log message ***Todd T. Fries
2011-03-08It was not possible to send out LS updates larger then the MTU.Claudio Jeker
Change the code in such a way that single huge LSA get fragmented but avoid IP fragmentation when packing multiple ones. Problem found and fix tested by Benjamin Papillon. Tested & OK sthen@
2011-03-08Instead of using IBUF_READ_SIZE as upper bound when building variousClaudio Jeker
packets use a better upper bound based on IP_MAXPACKET. Also change one IBUF_READ_SIZE to READ_BUF_SIZE since that is what the rest of the code uses. Tested and OK sthen@