summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2004-05-23- tcpdump is section 8, not 1Jason McIntyre
- uppercase `id' - update section on tun device creation - missing apostrophes - remove dead Xr's from SEE ALSO - Xr tun and ifconfig ok markus@
2004-05-22missing headerTheo de Raadt
2004-05-21Use '/' instead of ':' as separator for anchor path components. Note thatDaniel Hartmeier
the parser now needs quotes around paths containing separators. ok mcbride@
2004-05-21init fromlen; andrushock@korovino.netTheo de Raadt
2004-05-21Man page update to document the new network statements. OK henning@Claudio Jeker
2004-05-21Fix some gcc warnings in bgpctl because of the last commit. OK henning@Claudio Jeker
2004-05-21RFC 2796 bgp route reflector support. This is very useful in conjunctionClaudio Jeker
with templates. looks good, go for it henning@
2004-05-21Grrr. Forgot to cleanup dynamic announcements on shutdown.Claudio Jeker
2004-05-21move the big name tables to the .h file, makes the .c easierHenning Brauer
2004-05-21Make it possible to add, delete, flush and show network announcements.Claudio Jeker
OK henning@
2004-05-21Add support for dynamic announcements. Usefule to annouce temporaryClaudio Jeker
blackhole routes or to make network announcements dependent on a external state (e.g. for carp setups) OK henning@
2004-05-21add DLT_PPP_ETHER support plus some fixes for pppoe_if_print().Brad Smith
ok canacar@ From: Marc Huber <pppoe at pro-bono-publico dot de>
2004-05-20check for strdup(3) failure was missing in one case, catched byHenning Brauer
Andrey Matveev <andrushock@korovino.net>
2004-05-19Allow recursive anchors (anchors within anchors, up to 64Daniel Hartmeier
levels deep). More work required, but this is already functional. authpf users will need to adjust their anchor calls, but this will change again soon. ok beck@, cedric@, henning@, mcbride@
2004-05-19Add word boundary markers, so that the fast scanners get exactly what theyMarc Espie
are supposed to.
2004-05-18sendto() return code fixes; from andreq matveevJakob Schlyter
ok deraadt@
2004-05-17extend filter language to allow basic setting of COMMUNITIES attribute.Damien Miller
ok claudio@
2004-05-16Use arc4random(3) to compute random numbers, instead of using rand()Otto Moerbeek
to produce a double, snprintf()ing that into a buffer and then converting the string to an int with atoi(). ok millert@ henning@
2004-05-16Use arc4random(3) instead of rand(3) to compute random numbers.Otto Moerbeek
ok millert@ henning@
2004-05-15Workaround to work with the new multipath support. Do a RTM_GET first toClaudio Jeker
decide if a RTM_ADD or a RTM_CHANGE needs to be done when adding new routes. tested and OK henning@
2004-05-15Naming consistency. From Alexander Guy. ok canacar@Otto Moerbeek
2004-05-14Fix pppoe server mode. pppoe no longer chroots in server mode.Can Erkin Acar
the command 'allow users _ppp' must be added to the relevant section in ppp.conf. Found, tested and help claudio@ put that pppoe in deraadt@
2004-05-13as the authpf manpage describes, the connecting user's shell can beHenning Brauer
overloaded via login.conf. When verifying that the user's login shell is indeed authpf it is not sufficient to look at (struct passwd)->pw_shell, we also have to use login_getclass etc to check wether the shell gets overloaded. ok millert@ beck@
2004-05-13Pasto, change a cast from uid_t to gid_t (no real change...)Todd C. Miller
2004-05-13Set close on exec flag for cron's socket. Jarno HuuskonenTodd C. Miller
2004-05-13If we get EAGAIN reading from the cron socket check both cron andTodd C. Miller
at databases for jobs to run. Jarno Huuskonen.
2004-05-13Unswap the vhid and advskew values.Ryan Thomas McBride
2004-05-12tzsetHenning Brauer
2004-05-12tzsetHenning Brauer
2004-05-12like always I missed tzset(); Ben Lovett <ben@tilderoot.com>Henning Brauer
2004-05-11knfTheo de Raadt
2004-05-10write filter and lock bpf descriptor before dropping privileges,Can Erkin Acar
with help from otto@, tested by mickey@ and jolan@, ok deraadt@
2004-05-10Check return value of fclose() calls after writing.Otto Moerbeek
ok deraadt@ tdeval@
2004-05-10Do not always print banner page.Otto Moerbeek
ok henning@ millert@
2004-05-10Make the accept socket non-blocking. Should not matter since weTodd C. Miller
use select anyway but seems like a good idea since we really don't want cron to block...
2004-05-10when adding a new group to /etc/groups, place it just before the firstTheo de Raadt
+ entry. assistance from tdeval and otto. this is the first half of pr 3727, brendan@cs.uchicago.edu
2004-05-09prettyTheo de Raadt
2004-05-08off by one in key too long detectionHenning Brauer
2004-05-08fix redefinition detection with manual keyes ipsecHenning Brauer
2004-05-08with manual keyed ipsec, we need keys and spis for both directions -Henning Brauer
enforce that
2004-05-08Filter bpf writes and lock descriptor. tested by hshoexer@Can Erkin Acar
ok henning@ deraadt@
2004-05-08as bloody attempt to document neighbor cloningHenning Brauer
2004-05-08lots of munging about; canacar ok, tested by pb, looked at by various othersTheo de Raadt
2004-05-08a bloody attempt at documenting the ipsec fluff.Henning Brauer
this needs to be fleshed out and polished, but at least it is somewhat documented now...
2004-05-08KNFHenning Brauer
2004-05-08break out the consistency checking for neighbors in its own function,Henning Brauer
and verify that peers with ipsec have local-address specified (needed to set up the flows...)
2004-05-08do not omit the IPv6 listening addressHenning Brauer
2004-05-08provide log_sockaddr, which uses getnameinfo(), and use it inHenning Brauer
log_conn_attempt
2004-05-08allow for neighbor statements without { parameters } block; everythingHenning Brauer
can be inherited from the group
2004-05-08add support for ipsec ah with manual keys, pfkey part already does so, andHenning Brauer
flesh parser out a bit. also add support for printing ipsec ah with manual keys in printconf