Age | Commit message (Collapse) | Author | |
---|---|---|---|
2000-07-08 | handle IPv6 address in first element. | Jun-ichiro itojun Hagino | |
permit square bracket notation in first element of inetd.conf, like RFC2732. otherwise colon is slightly ambiguous. sync with kame. [::1]:ftp stream tcp6 nowait root /usr/libexec/ftpd ftpd -US -h | |||
2000-07-07 | document timezone command, as in boot_config(8) | Theo de Raadt | |
2000-07-07 | pass CFLAGS to build process, so that optimization happens; ↵ | Theo de Raadt | |
js3guj@gold.ocn.ne.jp | |||
2000-07-07 | o Log the (payload/size) of all packet types, not just TCP packets | brian | |
o If the new ``filter-decapsulation'' is enabled, delve into UDP packets that contain 0xff 0x03 as the first two bytes, and if we recognise it as PROTO_IP, decapsulate it for the purpose of filter checking. If we recognise it as PROTO_<anything else> mention this for logging purposes only. This change is aimed at people running PPPoUDP where the UDP traffic is being sent over another PPP link. It's desireable to have the top level link connected all the time, but to have the bottom level link capable of decapsulating the traffic and comparing the payload against the filters, thus allowing ``set filter dial ...'' to work in tunnelled environments. The caveat here is that the top ppp cannot employ any compression layers without making the data unreadable for the bottom ppp. ``disable deflate pred1 vj'' and ``deny deflate pred1 vj'' is suggested. | |||
2000-07-06 | remove mobile-ip option description, merged in by mitsake | Jun-ichiro itojun Hagino | |
2000-07-06 | sync with router renumber struct decl change. | Jun-ichiro itojun Hagino | |
more logs. make it very sure to close temporary socket. | |||
2000-07-06 | Don't write password lines longer than 1023 chars. | Hakan Olsson | |
Change two instances of err() to errx(). | |||
2000-07-06 | Insert missing .El directives. | Aaron Campbell | |
2000-07-05 | setproctitle with %s | Theo de Raadt | |
2000-07-04 | File of the week :-) If Tertiary Loader data link size might not be set. | Mats O Jansson | |
Since Ethernet is the only data link supported assume datalink to be 1492. Found when ragge@ludd.luth.se tried to boot a VAX 6000/400. -moj | |||
2000-07-04 | Fix stupid bug in extraction through playpen. | Marc Espie | |
2000-07-04 | If the spec allows 128-character filenames, our buffer has to be at least 129 | Aaron Campbell | |
characters to hold the trailing NULL. This also fixes a one-byte overflow. | |||
2000-07-03 | typo | Niklas Hallqvist | |
2000-07-03 | arp(8) invocations fixed | Niklas Hallqvist | |
2000-07-03 | Ignore filenames that are longer than spec allows (128 for MOP V4.0.0). | Mats O Jansson | |
Matt Power <mhpower@mit.edu>. -moj | |||
2000-07-03 | Correct the number of src/dst ports and add some FreeBSD specific | brian | |
firewall punching fixes. Obtained from: FreeBSD | |||
2000-07-03 | add warning on rsh/rlogin relay | Jun-ichiro itojun Hagino | |
2000-07-02 | OpenBSD'ify these man pages. | Aaron Campbell | |
2000-07-02 | correct use of route(8) in sample. | Jun-ichiro itojun Hagino | |
2000-07-02 | wscons tools | Michael Shalayeff | |
2000-07-02 | make it compiling only for alpha and hppa | Michael Shalayeff | |
2000-07-02 | wscons font loader; initial import from netbsd tree | Michael Shalayeff | |
2000-07-02 | wscons vt config tool; initial import from netbsd tree | Michael Shalayeff | |
2000-06-30 | warnx?/errx? paranoia (use "%s" not a bare string unless it is a | Todd C. Miller | |
constant). These are not security holes but it is worth fixing them anyway both for robustness and so folks looking for examples in the tree are not misled into doing something potentially dangerous. Furthermore, it is a bad idea to assume that pathnames will not include '%' in them and that error routines don't return strings with '%' in them (especially in light of the possibility of locales). | |||
2000-06-30 | mod_ssl 2.6.4 merge | Bob Beck | |
From brad@ | |||
2000-06-29 | oops, a typo got into there | Theo de Raadt | |
2000-06-29 | repair careless syslogging inside XSTATS | Theo de Raadt | |
2000-06-29 | use %s with syslog, probably just paranoia but it is good form | Todd C. Miller | |
2000-06-29 | use %s with syslog; millert wrote an identical patch | Theo de Raadt | |
2000-06-29 | use %s with syslog, at least crashable from command line | Theo de Raadt | |
2000-06-29 | use %s with syslog | Theo de Raadt | |
2000-06-28 | make _msgout() use syslog() with a %s, for future safety | Theo de Raadt | |
2000-06-28 | in quit(), be more careful about possible nasty parameters in the future | Theo de Raadt | |
2000-06-28 | BpfGetIntfName() returns syslog fmt args which are safe | Theo de Raadt | |
2000-06-28 | buf oflow safe | Theo de Raadt | |
2000-06-28 | creating line ourselves, but just in case, use %s with syslog | Theo de Raadt | |
2000-06-28 | syslog should use %s | Theo de Raadt | |
2000-06-28 | correct COPTS whacking code; wd@ics.nara-wu.ac.jp | Theo de Raadt | |
2000-06-28 | kldload ng_ether if we need to under FreeBSD. | brian | |
2000-06-25 | safe shell quoting | Dug Song | |
2000-06-25 | pass variables to dhclient-script via a constructed environment, instead of ↵ | Dug Song | |
a temporary shell script | |||
2000-06-24 | Don't assign an MTU based on the peers first-link MRU in MP mode. | brian | |
Use the peers MRRU as we're supposed to. | |||
2000-06-23 | Fix a printf-style arg cast (again) | brian | |
2000-06-23 | Improved 227, 229 and EPRT support in the nat code; FreeBSD | brian | |
Moved security checks into one place; FreeBSD Remove ``nat pptp'' now that it's transparent | |||
2000-06-23 | fix dhcpd to not abandon addresses forever when they are pinged before use | Bob Beck | |
which creates a nice denial of service when people use static addresses in the dhcp range. - instead abandon the address only for the default lease time so that it may be re-used afterwards. Tested and committed with aaron and jason while drinking beer and wearing balloons on my head in the bar at the USENIX party. | |||
2000-06-22 | Correct PPPoE in multi-link mode; jason@ | brian | |
2000-06-20 | sync with latest kame ndp(8). | Jun-ichiro itojun Hagino | |
accept scoped address notation. avoid infinite loop in certain routing table setup. | |||
2000-06-20 | add encryption for svnd's for Erich <hh@cyberpass.net>. You can do a | Niels Provos | |
poor man's encrypted file system with this. Blame the Greek. okay niklas@ | |||
2000-06-20 | Allow padding in LQR ECHO requests | brian | |
Problem found by: Tomaz Borstnar <tomaz.borstnar@over.net> | |||
2000-06-20 | pretty | Jason Wright | |