Age | Commit message (Collapse) | Author | |
---|---|---|---|
2004-05-23 | - tcpdump is section 8, not 1 | Jason McIntyre | |
- uppercase `id' - update section on tun device creation - missing apostrophes - remove dead Xr's from SEE ALSO - Xr tun and ifconfig ok markus@ | |||
2004-05-22 | missing header | Theo de Raadt | |
2004-05-21 | Use '/' instead of ':' as separator for anchor path components. Note that | Daniel Hartmeier | |
the parser now needs quotes around paths containing separators. ok mcbride@ | |||
2004-05-21 | init fromlen; andrushock@korovino.net | Theo de Raadt | |
2004-05-21 | Man page update to document the new network statements. OK henning@ | Claudio Jeker | |
2004-05-21 | Fix some gcc warnings in bgpctl because of the last commit. OK henning@ | Claudio Jeker | |
2004-05-21 | RFC 2796 bgp route reflector support. This is very useful in conjunction | Claudio Jeker | |
with templates. looks good, go for it henning@ | |||
2004-05-21 | Grrr. Forgot to cleanup dynamic announcements on shutdown. | Claudio Jeker | |
2004-05-21 | move the big name tables to the .h file, makes the .c easier | Henning Brauer | |
2004-05-21 | Make it possible to add, delete, flush and show network announcements. | Claudio Jeker | |
OK henning@ | |||
2004-05-21 | Add support for dynamic announcements. Usefule to annouce temporary | Claudio Jeker | |
blackhole routes or to make network announcements dependent on a external state (e.g. for carp setups) OK henning@ | |||
2004-05-21 | add DLT_PPP_ETHER support plus some fixes for pppoe_if_print(). | Brad Smith | |
ok canacar@ From: Marc Huber <pppoe at pro-bono-publico dot de> | |||
2004-05-20 | check for strdup(3) failure was missing in one case, catched by | Henning Brauer | |
Andrey Matveev <andrushock@korovino.net> | |||
2004-05-19 | Allow recursive anchors (anchors within anchors, up to 64 | Daniel Hartmeier | |
levels deep). More work required, but this is already functional. authpf users will need to adjust their anchor calls, but this will change again soon. ok beck@, cedric@, henning@, mcbride@ | |||
2004-05-19 | Add word boundary markers, so that the fast scanners get exactly what they | Marc Espie | |
are supposed to. | |||
2004-05-18 | sendto() return code fixes; from andreq matveev | Jakob Schlyter | |
ok deraadt@ | |||
2004-05-17 | extend filter language to allow basic setting of COMMUNITIES attribute. | Damien Miller | |
ok claudio@ | |||
2004-05-16 | Use arc4random(3) to compute random numbers, instead of using rand() | Otto Moerbeek | |
to produce a double, snprintf()ing that into a buffer and then converting the string to an int with atoi(). ok millert@ henning@ | |||
2004-05-16 | Use arc4random(3) instead of rand(3) to compute random numbers. | Otto Moerbeek | |
ok millert@ henning@ | |||
2004-05-15 | Workaround to work with the new multipath support. Do a RTM_GET first to | Claudio Jeker | |
decide if a RTM_ADD or a RTM_CHANGE needs to be done when adding new routes. tested and OK henning@ | |||
2004-05-15 | Naming consistency. From Alexander Guy. ok canacar@ | Otto Moerbeek | |
2004-05-14 | Fix pppoe server mode. pppoe no longer chroots in server mode. | Can Erkin Acar | |
the command 'allow users _ppp' must be added to the relevant section in ppp.conf. Found, tested and help claudio@ put that pppoe in deraadt@ | |||
2004-05-13 | as the authpf manpage describes, the connecting user's shell can be | Henning Brauer | |
overloaded via login.conf. When verifying that the user's login shell is indeed authpf it is not sufficient to look at (struct passwd)->pw_shell, we also have to use login_getclass etc to check wether the shell gets overloaded. ok millert@ beck@ | |||
2004-05-13 | Pasto, change a cast from uid_t to gid_t (no real change...) | Todd C. Miller | |
2004-05-13 | Set close on exec flag for cron's socket. Jarno Huuskonen | Todd C. Miller | |
2004-05-13 | If we get EAGAIN reading from the cron socket check both cron and | Todd C. Miller | |
at databases for jobs to run. Jarno Huuskonen. | |||
2004-05-13 | Unswap the vhid and advskew values. | Ryan Thomas McBride | |
2004-05-12 | tzset | Henning Brauer | |
2004-05-12 | tzset | Henning Brauer | |
2004-05-12 | like always I missed tzset(); Ben Lovett <ben@tilderoot.com> | Henning Brauer | |
2004-05-11 | knf | Theo de Raadt | |
2004-05-10 | write filter and lock bpf descriptor before dropping privileges, | Can Erkin Acar | |
with help from otto@, tested by mickey@ and jolan@, ok deraadt@ | |||
2004-05-10 | Check return value of fclose() calls after writing. | Otto Moerbeek | |
ok deraadt@ tdeval@ | |||
2004-05-10 | Do not always print banner page. | Otto Moerbeek | |
ok henning@ millert@ | |||
2004-05-10 | Make the accept socket non-blocking. Should not matter since we | Todd C. Miller | |
use select anyway but seems like a good idea since we really don't want cron to block... | |||
2004-05-10 | when adding a new group to /etc/groups, place it just before the first | Theo de Raadt | |
+ entry. assistance from tdeval and otto. this is the first half of pr 3727, brendan@cs.uchicago.edu | |||
2004-05-09 | pretty | Theo de Raadt | |
2004-05-08 | off by one in key too long detection | Henning Brauer | |
2004-05-08 | fix redefinition detection with manual keyes ipsec | Henning Brauer | |
2004-05-08 | with manual keyed ipsec, we need keys and spis for both directions - | Henning Brauer | |
enforce that | |||
2004-05-08 | Filter bpf writes and lock descriptor. tested by hshoexer@ | Can Erkin Acar | |
ok henning@ deraadt@ | |||
2004-05-08 | as bloody attempt to document neighbor cloning | Henning Brauer | |
2004-05-08 | lots of munging about; canacar ok, tested by pb, looked at by various others | Theo de Raadt | |
2004-05-08 | a bloody attempt at documenting the ipsec fluff. | Henning Brauer | |
this needs to be fleshed out and polished, but at least it is somewhat documented now... | |||
2004-05-08 | KNF | Henning Brauer | |
2004-05-08 | break out the consistency checking for neighbors in its own function, | Henning Brauer | |
and verify that peers with ipsec have local-address specified (needed to set up the flows...) | |||
2004-05-08 | do not omit the IPv6 listening address | Henning Brauer | |
2004-05-08 | provide log_sockaddr, which uses getnameinfo(), and use it in | Henning Brauer | |
log_conn_attempt | |||
2004-05-08 | allow for neighbor statements without { parameters } block; everything | Henning Brauer | |
can be inherited from the group | |||
2004-05-08 | add support for ipsec ah with manual keys, pfkey part already does so, and | Henning Brauer | |
flesh parser out a bit. also add support for printing ipsec ah with manual keys in printconf |