summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2007-10-05stylistic changes in the relay/relay_config structure.Reyk Floeter
2007-10-05cast to an intReyk Floeter
2007-10-05using an enum in the imsg_hdr is gross, use a fixed u_int16_t insteadReyk Floeter
2007-10-05unbreak non-SSL relays by calling the ssl context init only if the SSLReyk Floeter
flag is present...
2007-10-04Handle CARP for IPv6. Reported and tested by todd@Can Erkin Acar
ok todd@, henning@
2007-10-04when inserting blackhole or reject routes, set the gateway address toHenning Brauer
127.0.0.1 / ::1 unconditioally, since RTF_BLACKHOLE/REJECT are not actually checked in the forwarding path and the gw doesn't matter otherwise. makes them work.. found teh hard way by me. claudio ok
2007-10-02stop messing with lgetc to please hoststated's check/expect.Pierre-Yves Ritschard
instead move some of the logic in yylex and do hoststated specific translations into hoststated.c ok gilles@
2007-10-02Use kinfo_proc2 instead of kinfo_proc.Mark Kettenis
ok art@
2007-10-02clean up merged code.Pierre-Yves Ritschard
2007-10-01Add NUMBER to hoststated's lexer, very similar to what has gone inPierre-Yves Ritschard
in the other daemons recently. Prompted and based on work by deraadt@ proofread and ok gilles@
2007-10-01Sync .nd with other parts of hoststated, prompted by jmc@Pierre-Yves Ritschard
2007-10-01kill some remaining debug that snuk in.Pierre-Yves Ritschard
2007-10-01keep lines < 80.Pierre-Yves Ritschard
2007-10-01fix alot of whitespace problems...Esben Norby
2007-09-30When printing the config always include the interface IP address.Claudio Jeker
Without this multiple networks on one interface could not be distinguished. OK norby@
2007-09-29KNF.Pierre-Yves Ritschard
2007-09-28KNFPierre-Yves Ritschard
2007-09-28spacesClaudio Jeker
2007-09-28Better description of the daemon.Pierre-Yves Ritschard
Initially prompted by deraadt@, with much much help from jmc@ (as always).
2007-09-28nitMarc Espie
from qgiovanni@gmail.com
2007-09-28Correct my mail address.Pierre-Yves Ritschard
2007-09-28Change the ssl_privsep code to work on char buffers.Pierre-Yves Ritschard
The fd based code introduced weirdness since all children were accessing the same fd at once. This will also greatly facilitate reloading, no fd-passing will be involved between the parent and relay children. While there, cleanup the code diverting from the original ssl_rsa.c code a bit more. Weird behavior discovery by pascoe@.
2007-09-28Cleanup some #includes plus some minor other cleanup. OK norby@Claudio Jeker
2007-09-28"require to +inf." is not a good verb pattern, so reword;Jason McIntyre
2007-09-28Add missing "s" to https check description.Christopher Pascoe
ok pyr@
2007-09-27Move SSL context creation after privileges are dropped.Pierre-Yves Ritschard
This puts the ssl_privsep code to use. One more step towards graceful L7 reload.
2007-09-27Simplify ssl_privsep.c, since it won't need to remain synced with thePierre-Yves Ritschard
equivalent openssl functions.
2007-09-27Do not clear the changed flag to early, which prevented a tablePierre-Yves Ritschard
from being used by several services. ``looks fine'' reyk@
2007-09-25Last missing piece in the equal cost multipath support for ospfd.Claudio Jeker
Send all possible nexthops to the parent process and correctly sync the RIB, FIB and kernel routing table. Based on initial work by pyr@. OK pyr@ norby@ PS: don't forget that you need to enable multipath support via a sysctl
2007-09-25handle empty strings returned by fgetsCharles Longeau
ok ray@
2007-09-25Introduce two new functions to be able to load certificates whilePierre-Yves Ritschard
already chrooted and with privileges dropped. This is the very first step in being able to reload a layer 7 configuration. not ok reyk who's away but should be glad to see this in.
2007-09-22avoid case ranges; ok millert@Otto Moerbeek
2007-09-21typo: print hexdump of packet, instead of pcap header; ok canacar, henningMarkus Friedl
2007-09-20obey -F installedMarc Espie
noticed by kurt@, tested by him too.
2007-09-18use C99 explicit struct initializer instead of deprecated gcc 2.5Otto Moerbeek
style. ok miod@ millert@
2007-09-18Correctly track the E-bit of router LSA on config reloads. If redistributionClaudio Jeker
is turned on or off the E-bit needs to be toggled accordingly else the AS-external LSA are ignored by the other OSPF routers. OK norby@
2007-09-16log_fmt_peer() does not use a static buffer so it is necessary to free theClaudio Jeker
string that it returned later. rde_update_log() did not do that. Memory leak found and diff provided by Mike Belopuhov.
2007-09-16Change the way nexthops are calculated on the root level. Instead of lookingClaudio Jeker
from the target back and trying to figure the nexthop out, the link is searched in the interface list and the info from the matiching interface is used. This should solve the nexthop issues with setups having multiple point-to-point links between two routers as reported on misc@ some time ago. tested and OK norby@
2007-09-15[fF]uther -> [fF]urther in comments and man page. First one spotted onKenneth R Westerback
tech@ by Jung.
2007-09-14remove some warnings:Charles Longeau
unused variable `variable' `variable' might be used uninitialized in this function ok gilles@ ray@
2007-09-14use a setup function for options, cleaner; ok cloderTheo de Raadt
2007-09-14Correctly assign a default weight of 1 to sensors and servers.Chris Kuethe
ok beck
2007-09-13Move parser to use NUMBER as all other parse.y do know. A bit tricky becauseClaudio Jeker
all the relative metrics need some special handling. OK henning@ deraadt@
2007-09-13add -n to usage();Jason McIntyre
2007-09-13Provide the -n switch like in the other imsg daemons for testingPierre-Yves Ritschard
the configuration file. "yes please, ok" henning@
2007-09-13one more missed change;Jason McIntyre
2007-09-13Small style tweak, from jmc and Maurice JanssenChris Kuethe
2007-09-12Add a knob to compensate for a refclock that is early or late. Based on aChris Kuethe
diff from Maurice Janssen. Manpage help from jmc and Maurice, other nits from deraadt and otto. ok deraadt, otto
2007-09-12default weight has to remain 1; seen by Maurice JanssenTheo de Raadt
2007-09-12Another parser.y that switches to parse numbers directly in the lexer.Claudio Jeker
Most complex part was "redistribute 10/8" which need special handling. With and OK deraadt@, OK norby@