summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2004-06-22Precedence and type fix; ok henning@Alexander Guy
2004-06-22Precedence fix; ok henning@Alexander Guy
2004-06-22missing bzero in a function for this strange other address familyHenning Brauer
2004-06-22introduce kroute6, which will be used to build a seperate v6 tableHenning Brauer
(smashing them into the v4 table would raise the memory requirements far too much), and make kroute_nexthop (where we are not under such memory pressure, you don't have a hundred thousand nexthops) v4/v6. change existing callers to use the v4 part, claudio ok
2004-06-22connect ntpdHenning Brauer
2004-06-22Templates with unknown AS where always configured as ebgp peers even ifClaudio Jeker
they were ibgp ones. OK henning@
2004-06-22In draft-ietf-ipsec-nat-t-ike-01,02,03, NAT-D is payload 130. Rewrite a bitHakan Olsson
to understand payloads in the private range. Also match a few "well-known" vendor-IDs. markus@ "looks ok".
2004-06-22Recognize NAT-T Keepalive packets. markus@ ok.Hakan Olsson
2004-06-22so we call realloc() on our pollfd array and the peer_l one when they shrunkHenning Brauer
to save memory... yet, that realloc call can fail with ENOMEM ;) don't shrink when (needed + reserve < allocated), but (needed + 2 * reserve < allocated) the longer term goal is of course to not fail at all when a shrink-realloc fails... but that's for later
2004-06-22use snprintf(3) instead of home-grown glue_strings() functionAnil Madhavapeddy
millert@ ok
2004-06-22handle interface removals in the poll loop. ok henning@Can Erkin Acar
2004-06-21support for old stuff in pkg_info/pkg_delete, e.g., @srcMarc Espie
prompted by miod@, okay miod@ millert@.
2004-06-21dont compare int with NULL, compare to 0 instead, otto@ okAnil Madhavapeddy
2004-06-21Implement pkg_add -I for real; ok espie@Miod Vallat
2004-06-20IPv4/v6 support for standalone mode. brad tested and ok'edJun-ichiro itojun Hagino
2004-06-20skip over multipath routesHenning Brauer
maybe one day we come up with a good reason for bgpd to use multipath routes, but for now it doesn't make any sense - bgpd inserts the "best" path fr a prefix, there's no point in inserting more than one. one is always the "best" one by bgp metrics. with claudio
2004-06-20mention new -l option, some nitpicksPedro Martelletto
mdoc tutoring and ok jfb@
2004-06-20at least somewhat consistently name the TAILQ_ENTRYs... this confused meHenning Brauer
more than once
2004-06-20allow for receival of up to 16 fds at once; after discussion with theoHenning Brauer
2004-06-20make vnconfig use the new VNDIOCGET ioctl to retrieve information aboutPedro Martelletto
the status of vnode disks, ok millert@
2004-06-20argh, don't want to shutdown the socket in the parent after sending,Henning Brauer
just plain close
2004-06-20- do not use __attribute__((volatile)) as its a synonym for __dead nowadaysAnil Madhavapeddy
- bad format string "\%s" -> "%s" in print-ike.c fixes parsing using CIL, discussed with millert@ niklas@
2004-06-20implement file descriptor passing in the imsg/msgbuf framework, and useHenning Brauer
it to let the main process to prepare new listening sockets (socket() and bind()) on behalf of the session engine, which of course cannot bind() to ports < 1024 any more once it dropped privileges. with some help from theo, claudio ok
2004-06-20fix the "option dhcp-client-identifier" hex exampleHenning Brauer
From: Marco Munari <mar@i.am> in PR3824
2004-06-20make popa3d (inetd mode) address family neutral (= IPv6 support).Jun-ichiro itojun Hagino
from popa3d patch by kame
2004-06-18simplify license, ok niels matthieuHenning Brauer
2004-06-18size struct pollfd and idx2peer dynamically instead of imposing an arbitaryHenning Brauer
limit on OPEN_MAX, modeled after bgpd
2004-06-18ewps, add ntpd.conf.5Henning Brauer
2004-06-18bloody attempt at a manpageHenning Brauer
2004-06-17UUpdate ISC copyright year to 2004Todd C. Miller
Remove unused macros Skip_Line and MkLower Remove trailing whitespace
2004-06-17print '<cr>' instead of '(nothing)' when we hit the end token in theHenning Brauer
context-dependent usage help
2004-06-17provide most of the client functionality.Henning Brauer
hook the descriptors into the main poll and such. we're not doing anything with the reply we recive yet, tho. mostly hacked on the Frankfurt->Montreal flight, as batteries and those horrible air canada seats permitted...
2004-06-17provide log_sockaddr, from bgpdHenning Brauer
2004-06-17err on calloc failure; ok henning@Alexander Guy
2004-06-15knfTheo de Raadt
2004-06-14Use new ioctls. ok beck@ henning@Cedric Berger
2004-06-14Set relay session id in outgoing packets properly. Report with patchCan Erkin Acar
from Girish Venkatachalam. ok millert@
2004-06-14Document where we diverge from other implementations (due to differentTodd C. Miller
fields in passwd(5)). OK otto@ a while ago.
2004-06-14Fix tcpslice ftp URL. From f5813 at sbcglobal dot net.Otto Moerbeek
2004-06-11Better stack usage on m88k for lwp.Miod Vallat
2004-06-10SECURITY: CAN-2004-0492 (cve.mitre.org)Henning Brauer
Reject responses from a remote server if sent an invalid (negative) Content-Length. [Mark Cox]
2004-06-10get changes from mod_ssl 2.8.18:Henning Brauer
*) Fix buffer overflow in "SSLOptions +FakeBasicAuth" implementation if the Subject-DN in the client certificate exceeds 6KB in length. (CVE CAN-2004-0488). *) Handle the case of OpenSSL retry requests after interrupted system calls during the SSL handshake phase. *) Remove some unused functions.
2004-06-09Take better care of people down under living in X and a half hourOtto Moerbeek
timezones. ok canacar@
2004-06-09move to a dynamically allocated struct pollfd array.Henning Brauer
we used a ststic one with OPEN_MAX entries, which is a rather arbitary limit as OPEN_MAX is _not_ the max # of open fds we can have, but just a default for that setting. in the same move we have to allocate the peer_l array, basically there for pfd-index to peer pointers to prevent peer list scans all time, dynamiccaly to. we overallocate a little and use that reserve until we have to realloc again later to prevent reallocs for every single control connection or a single flapping peer. help & ok claudio
2004-06-09 * Bring rdate's SNTP support into compliance with SNTPv4 (RFC 2030).Alexander Guy
* More robust handling of NTP error conditions (e.g. host or service unreachable). * Improve the detection of stale and/or spoofed NTP responses from servers. * Add support for getaddrinfo(3)'s multiple host support if error conditions occur (e.g. round-robin DNS, and the first NTP server isn't responding, try the next host in line). * Minor formatting/code cleanup. ok henning@
2004-06-08Remove 'nmbuclust' setting of NMBCLUSTERS. They don't exist anymore.Ryan Thomas McBride
ok millert@
2004-06-08fix a few memory leaks in error paths and one in the pftable path,Henning Brauer
and simplyfy the prefix production error handling slightly from Mr. Memleak Terminator Patrick Latifi <pat@eyeo.org>, kickass!
2004-06-07consistently refer to the authpf_users table;Jason McIntyre
noticed by die tuere; ok beck@
2004-06-07clarify how tags are parsed;Jason McIntyre
help from, tweaks, and ok's: dhartmei@ otto@ millert@
2004-06-07mod_digest for Apache does not properly verify the nonce of a client responseBrad Smith
by using a AuthNonce secret. CAN-2003-0987 ok henning@